CVE-2010-4837

CVE-2010-4837 affects Joomla! with the JSupport (com_jsupport) component version 1.5.6. It is a Cross-site Scripting (XSS) vulnerability exploitable via the subject parameter (title field) in a saveTicket action to index2.php, allowing remote script/HTML injection. The NVD lists a base score of 4...

CVE-2010-4837: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...