Cross site scripting

In Joomla component 'Joomlatools - DOCman 3.5.13 and likely most versions below' are affected to an reflected Cross-Site Scripting XSS in an image upload function...

CVE-2022-27910 Extension - Joomlatools - DOCman - Reflected Cross-Site Scripting (XSS) in an image upload function

In Joomla component 'Joomlatools - DOCman 3.5.13 and likely most versions below' are affected to an reflected Cross-Site Scripting XSS in an image upload function...

CVE-2022-27910

CVE-2022-27910 affects Joomla DOCman (Joomlatools) 3.5.13 and likely earlier versions, with a reflected Cross-Site Scripting (XSS) in the image upload function. The vulnerability arises in the image upload handling, enabling injection of script via a crafted image path/parameter. Public details f...

Joomlatools DOCman 跨站脚本漏洞

Joomlatools DOCman is Joomlatools' Documentation and Download Manager extension for Joomla! A security vulnerability exists in Joomlatools DOCman 3.5.13, which originates from cross-site scripting in the image upload feature...

CVE-2022-27910

In Joomla component 'Joomlatools - DOCman 3.5.13 and likely most versions below' are affected to an reflected Cross-Site Scripting XSS in an image upload function...

Joomla! XSS in Default Templates

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

GHSA-V84J-VH7X-G7J6 Joomla! XSS in Default Templates

In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates...

jQuery File Upload Plugin Unrestricted file upload vulnerability

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

GHSA-WXG6-F773-G2F7 jQuery File Upload Plugin Unrestricted file upload vulnerability

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

Joomla! vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GHSA-HQ9X-8M8J-5HMH Joomla! vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GHSA-WWFH-28HX-W2R2 Joomla! Framework Remote Code Injection Vulnerability

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values...

Joomla! Framework Remote Code Injection Vulnerability

The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values...

Joomla! Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

GHSA-5XMG-W578-GQ5J Joomla! Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

Joomla! XSS Vulnerability

An issue was discovered in Joomla! Core starting in 3.0.0 and prior to 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack...

GHSA-G3M5-VVJ7-XRWV Joomla! XSS Vulnerability

An issue was discovered in Joomla! Core starting in 3.0.0 and prior to 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack...

GHSA-FJ57-VHRC-73R7 Joomla! vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php...

Joomla! vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php...

GHSA-VCQ7-X4WR-W2MJ Joomla! vulnerable to Cross-site Scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...