Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) com_search, (2) com_content, and (3) mod_login components. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2007-4189

Related Vulnerabilities

WordPress Plugin OdiHost Newsletter 'openstat.php' SQL Injection (1.0)

WordPress Plugin MX Time Zone Clocks Cross-Site Scripting (3.4)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43726)

WordPress Plugin WPFront User Role Editor Unspecified Vulnerability (2.14.1)

TYPO3 Improper Neutralization of HTTP Headers for Scripting Syntax Vulnerability (CVE-2021-41114)

Severity

Medium

Classification

CVE-2007-4189 CWE-707

Tags

Missing Update Known Vulnerabilities