19238 matches found
Cross site scripting
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
Cross site scripting
A reflected XSS vulnerability was discovered in the LivingWord component for Joomla...
CVE-2023-40627
Technical details (affected products, versions, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and trusted sources to obtain concrete information.
CVE-2023-40627 Extension - MLWebTechnologies - Reflected XSS in LivingWord component for Joomla 1.0.0-3.0.0
A reflected XSS vulnerability was discovered in the LivingWord component for Joomla...
CVE-2023-40659
Affected product: Easy Quick Contact module for Joomla. Vulnerability: reflected XSS in the Easy Quick Contact module. Root cause: not explicitly detailed beyond a reflected XSS flaw. Impact (per sources): enables cross-site scripting in victims’ browsers; CVSS v3.1 base score 6.1 (MEDIUM) with N...
CVE-2023-40659 Extension - joomboost.com - Reflected XSS in Easy Quick Contact module for Joomla 1.0.0-1.3.0
A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...
CVE-2023-40658
The CVE 2023-40658 entry concerns a reflected Cross-Site Scripting (XSS) vulnerability in the Clicky Analytics Dashboard module for Joomla. Affected component: Clicky Analytics Dashboard module for Joomla; vulnerability type: reflected XSS described across multiple sources (NVD, Red Hat, CVE list...
CVE-2023-40658 Extension - deconf.net - Reflected XSS in Clicky Analytics Dashboard module for Joomla 1.0.0-1.3.1
A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla...
CVE-2023-40629
The CVE-2023-40629 entry describes a SQL injection vulnerability in the Joomla LMS Lite component. Affected software: LMS Lite for Joomla (extension). Vulnerable element: the LMS Lite component code handling input likely reused in SQL queries; exact vulnerable file/parameter is not specified in t...
CVE-2023-40629 Extension - king-products.net - SQLi vulnerability in LMS Lite component for Joomla 1.0.0-3.3.0.1
SQLi vulnerability in LMS Lite component for Joomla...
CVE-2023-40628
CVE-2023-40628 describes a reflected XSS in the Extplorer component for Joomla. Affected versions are listed as 1.0.0–2.1.15. According to the CVE metadata, the vulnerability has CVSS3.1 Base Score 6.1 (Medium), with/attack vector: NETWORK, attack complexity: LOW, privileges required: NONE, user ...
CVE-2023-40628 Extension - Extplorer.net - Reflected XSS in Extplorer component for Joomla 1.0.0-2.1.15
A reflected XSS vulnerability was discovered in the Extplorer component for Joomla...
CVE-2023-49708 Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9
SQLi vulnerability in Starshop component for Joomla...
CVE-2023-49708
CVE-2023-49708 is a SQL injection vulnerability in the Starshop component for Joomla. The affected entry indicates a network-exposed vulnerability with no privileges required and no user interaction, yielding a CVSS v3.1 base score of 9.8 (Confidentiality/Integrity/Availability impact: HIGH). The...
CVE-2023-49707 Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0
SQLi vulnerability in S5 Register module for Joomla...
CVE-2023-40656
CVE-2023-40656 is a reflected XSS vulnerability in Joomla’s Quickform component. Across sources, the issue is described as a reflected XSS in Quickform, affecting Joomla extensions (notably plasma-web.ru listing) for versions 1.0.0–3.3.01. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A...
CVE-2023-49707
CVE-2023-49707 is an SQL injection in the S5 Register Joomla extension. Affected versions: 1.0.0–3.0.0. Root cause is a SQLi in the S5 Register module, with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, critical). Exploitation details are not provided in the documents. No remedia...
CVE-2023-40656 Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01
A reflected XSS vulnerability was discovered in the Quickform component for Joomla...
CVE-2023-40657
CVE-2023-40657 affects the Joomdoc component for Joomla. The connected sources confirm a reflected XSS vulnerability in Joomdoc, with the CVE listed under extensions such as artio.net and related Red Hat/NVD entries. The NVD entry shows a CVSSv3.1 base score of 6.1 (Medium) with Network access, U...