CVE-2010-4516

2010-12-0920:00:00

mitre

www.cve.org

joomla

jxtended comments

xss

vulnerabilities

remote attackers

web script

html

unspecified vectors

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the JXtended Comments component before 1.3.1 for Joomla allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

jxtended.com/blog/releases/375-jxtended-comments-131-stable-released.html

secunia.com/advisories/42534

www.securityfocus.com/bid/45296