Lucene search

K
joomlaOpen Source Matters, Inc.JOOMLA-80
HistoryFeb 26, 2013 - 12:00 a.m.

[20130405] - Core - XSS Vulnerability

2013-02-2600:00:00
Open Source Matters, Inc.
developer.joomla.org
110

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

49.3%

Inadequate filtering leads to XSS vulnerability in Voting plugin.

Affected configurations

Vulners
Node
joomlajoomla\!Range<2.5.10
OR
joomlajoomla\!Range<3.1.0
OR
joomlajoomla\!Range<3.0.4
VendorProductVersionCPE
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

49.3%