Description

Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Remediation

References

CVE-2011-2892

Related Vulnerabilities

Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164)

WordPress Plugin Bulk Creator Cross-Site Scripting (1.0.1)

Oracle Database Server CVE-2008-2611 Vulnerability (CVE-2008-2611)

WordPress Plugin UserPro-Community and User Profile Multiple Vulnerabilities (5.1.1)

IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)

Severity

Medium

Classification

CVE-2011-2892 CWE-20

Tags

Missing Update Known Vulnerabilities