Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the (1) getUserStateFromRequest function, and the (2) SEF and (3) com_messages modules.

Remediation

References

CVE-2006-3480

Related Vulnerabilities

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Cross-Site Scripting (4.2.2)

Drupal Other Vulnerability (CVE-2022-25275)

WordPress Plugin Social Photo Gallery Remote Code Execution (1.0)

WordPress Plugin Easy Contact Form Pro Cross-Site Scripting (1.1.1.8)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (7.1.18)

Severity

Medium

Classification

CVE-2006-3480

Tags

Missing Update Known Vulnerabilities