CVE-2011-4830

2022-10-0316:15:14

mitre

www.cve.org

cve-2011-4830

cross-site scripting

barter sites component

joomla!

remote authenticated users

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the (1) listing_title, (2) description, (3) homeurl (aka Website Address), (4) paystring (aka Payment types accepted), (5) sell_price, (6) shipping_cost, and (7) quantity parameters to index.php.