Cross site scripting

2009-12-0819:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

Cross-site scripting (XSS) vulnerability in modules/mod_yj_whois.php in the YJ Whois component 1.0x and 1.5.x for Joomla! allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
yj_whoiseq1.0.0
yj_whoiseq1.5.0

CPE	Name	Operator	Version
	yj_whois	eq	1.0.0
	yj_whois	eq	1.5.0

References

extensions.joomla.org/extensions/external-contents/domain-search/5774

secunia.com/advisories/37525

www.youjoomla.com/joomla_support/yj-whois-module/4950-xss-security-patch-yj-whois.html