CVE-2012-4532

Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...

CVE-2012-4532

CVE-2012-4532 affects Joomla! 2.5.x prior to 2.5.7, where the Language Switcher module (modules/mod_languages/tmpl/default.php) is vulnerable to cross-site scripting via PATH_INFO to index.php. The issue is an XSS in the Language Switcher component, enabling remote injection of script/HTML. The p...