Description

Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-1612

Related Vulnerabilities

concrete5 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8082)

WordPress Plugin AlertWire Information Disclosure (1.1.1)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3512)

WordPress Plugin User Verification Security Bypass (1.0.93)

WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.7)

Severity

Medium

Classification

CVE-2012-1612 CWE-707

Tags

Missing Update Known Vulnerabilities