Description

Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Remediation

References

CVE-2011-2892

Related Vulnerabilities

WordPress Plugin Gwolle Guestbook Cross-Site Scripting (2.5.3)

Apache Tomcat CVE-2016-6794 Vulnerability (CVE-2016-6794)

Python Other Vulnerability (CVE-2016-3189)

Apache Tomcat Other Vulnerability (CVE-2002-0936)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.13)

Severity

Medium

Classification

CVE-2011-2892 CWE-20

Tags

Missing Update Known Vulnerabilities