VDB
BDU%3A2024-01594
BDU%3A2024-01594
PUBLISHED
CVSS 9.399999618530273 CRITICAL
Уязвимость системы управления содержимым Joomla!, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
Risk Scores
CVSS 2.0
9.399999618530273
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GNU General Public License | Joomla! | |
| Joomla! Project | Joomla! CMS | 3.7.0-3.10.14, 4.0.0-4.4.2, 5.0.0-5.0.2 |
Timeline
- Feb 20, 2024 CVE Published
- Feb 22, 2024 PoC Published
- Feb 27, 2024 CVE Updated
- Feb 29, 2024 PoC Published
- Feb 29, 2024 PoC Published
References
- http://developer.joomla.org/security-centre/929-20240205-core-inadequate-content-filtering-within-the-filter-code.html url
- https://www.cybersecurity-help.cz/vdb/SB2024022067 url
- https://developer.joomla.org/security-centre/929-20240205-core-inadequate-content-filtering-within-the-filter-code.html vendor-advisory
- https://www.sonarsource.com/blog/joomla-multiple-xss-vulnerabilities/ url