Lucene search

K
joomlaOpen Source Matters, Inc.JOOMLA-593
HistoryAug 27, 2014 - 12:00 a.m.

[20140901] - Core - XSS Vulnerability

2014-08-2700:00:00
Open Source Matters, Inc.
developer.joomla.org
101

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

51.0%

Inadequate escaping leads to XSS vulnerability in com_media.

Affected configurations

Vulners
Node
joomlajoomla\!Range<3.2.5
OR
joomlajoomla\!Range<3.3.4
VendorProductVersionCPE
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

51.0%