Joomla! CMS 3.4.3 Cross Site Scripting

Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability Date: 2015-08-18 Exploit Author: cfreer [email protected] & 0keeteam Vendor Homepage: http://joomla.org Version: 3.4.0 through 3.4.3 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-6939 Description Inadequate escaping leads to XSS vulnerabilit...

Joomla! CMS 3.4.3 Cross Site Scripting Vulnerability

Joomla! CMS versions 3.4.0 through 3.4.3 suffer from a cross site scripting vulnerability. Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability Date: 2015-08-18 Exploit Author: cfreer email protected & 0keeteam Vendor Homepage: http://joomla.org Version: 3.4.0 through 3.4.3 Tested on:...

CVE-2015-6939

CVE-2015-6939 affects Joomla! core login module in version 3.4.x prior to 3.4.4. Root cause: inadequate escaping in the login component enables cross-site scripting (XSS). Impact: remote attackers can inject arbitrary script or HTML in a user’s browser, via unspecified vectors (as described in so...