Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

Remediation

References

CVE-2007-5577

Related Vulnerabilities

Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-37843)

WordPress Plugin Protected Posts Logout Button Security Bypass (1.4.5)

Apache Tomcat version older than 6.0.9

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1835)

WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)

Severity

Medium

Classification

CVE-2007-5577 CWE-707

Tags

Missing Update Known Vulnerabilities