Lucene search

Open Source Matters, Inc.JOOMLA-936

HistoryJun 03, 2024 - 12:00 a.m.

[20240702] - Core - Self-XSS in fancyselect list field layout

2024-06-0300:00:00

Open Source Matters, Inc.

developer.joomla.org

self-xss

fancyselect

list field

joomla! cms

versions 4.0.0-4.4.5

5.0.0-5.1.1

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

6.5

Confidence

High

EPSS

Percentile

14.6%

JSON

Joomla! CMS versions 4.0.0-4.4.5, 5.0.0-5.1.1

Affected configurations

Vulners

Node

joomlajoomla\!Range<4.4.6

joomlajoomla\!Range<5.1.2

VendorProductVersionCPE
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
joomla	joomla\!	*	cpe:2.3:a:joomla:joomla\!::::::::