2017-04-25 20:59:00 2017-05-02 20:15:47

In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla! 1.6.5 Joomla! 1.5.11 Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla! 1.6.6 Joomla! 1.5.12 Joomla! 1.5.10 Joomla! 1.5.15 Joomla! 1.5.16 Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla! 1.5.13 Joomla! 1.5.14 Joomla! 1.5.19 Joomla! 1.5.17 Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla! 1.5.18 Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla! 1.6.0 Joomla! 1.6.3 Joomla! 1.6.4 Joomla! 1.6.1 Joomla Joomla! 1.6.2 (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla! 1.5.6 Joomla! 1.5.7 Joomla! 2.5.7 Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla! 2.5.8 Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla! 3.1.2 Joomla! 3.1.3 Joomla Joomla! 3.6.5 (not an official CPE) Joomla! 3.1.4 Joomla Joomla! 3.5.0 (not an official CPE) Joomla! 3.1.5 Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.1.6 (not an official CPE) Joomla! 3.1.0 Joomla! 3.1.1 Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla! 1.5.0 Joomla! 1.5.1 Joomla! 1.5.4 Joomla! 1.5.5 Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla! 1.5.2 Joomla! 1.5.3 Joomla! 2.5.3 Joomla Joomla! 2.5.26 (not an official CPE) Joomla! 2.5.4 Joomla Joomla! 2.5.25 (not an official CPE) Joomla! 2.5.1 Joomla! 2.5.2 Joomla Joomla! 2.5.24 (not an official CPE) Joomla! 3.4.0 Beta 1 Joomla Joomla! 2.5.23 (not an official CPE) Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Beta 2 Joomla Joomla! 2.5.28 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla! 2.5.0 Joomla Joomla! 2.5.21 (not an official CPE) Joomla! 3.4.0 Joomla Joomla! 2.5.20 (not an official CPE) Joomla! 3.0.0 Joomla! 3.4.1 Joomla Joomla! 3.4.2 (not an official CPE) Joomla Joomla! 3.4.3 (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla! 3.0.1 Joomla! 3.0.2 Joomla Joomla! 2.5.15 (not an official CPE) Joomla! 2.5.14 Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla! 2.5.13 Joomla! 2.5.12 Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla! 2.5.11 Joomla! 2.5.10 Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Release Candidate 1 Joomla! 2.5.5 Joomla! 2.5.6 Joomla! 2.5.9 Joomla! 1.5.8 Joomla! 1.5.9 Joomla! 3.4.2 Release Candidate 1 Joomla! 3.4.1 Release Candidate 1 Joomla! 1.7.4 Joomla! 1.7.5 Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.4 (not an official CPE) Joomla! 3.3.5 Joomla! 1.5.22 Joomla! 1.5.23 Joomla! 1.5.20 Joomla! 1.5.21 Joomla! 1.5.26 Joomla! 1.5.24 Joomla! 1.5.25 Joomla! 1.5.15:rc Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla! 1.7.2 Joomla! 1.7.3 Joomla! 1.7.0 Joomla! 1.7.1