Description

Cross-site scripting (XSS) vulnerability in the login module in Joomla! 3.4.x before 3.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2015-6939

Related Vulnerabilities

Atlassian Jira Improper Authentication Vulnerability (CVE-2021-43946)

Squid Other Vulnerability (CVE-2011-3205)

WordPress Plugin Simple Page Ordering Cross-Site Scripting (2.2.1)

WordPress Plugin Helios Solutions Brand Logo Slider Arbitrary File Upload (2.1)

Oracle HTTP Server CVE-2018-2561 Vulnerability (CVE-2018-2561)

Severity

Medium

Classification

CVE-2015-6939 CWE-707

Tags

Missing Update Known Vulnerabilities