Description

Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/modules.php.

Remediation

References

CVE-2012-2413

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2015-3411)

phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15729)

CherryPy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0252)

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.6)

Drupal Core 9.0.x Cross-Site Request Forgery (9.0.0 - 9.0.14)

Severity

Medium

Classification

CVE-2012-2413 CWE-707

Tags

Missing Update Known Vulnerabilities