CVE-2006-3480

Joomla! contains multiple cross-site scripting (XSS) vulnerabilities in versions before 1.0.10. Attackable via unspecified parameters involving the getUserStateFromRequest function, and the SEF and com_messages modules, remote attackers could inject arbitrary web script or HTML. The NVD entry ass...