2019-05-20 15:29:04 2019-05-20 17:32:47

An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly escape user supplied data, which leads to a potential XSS attack vector.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla! 1.7.0 Joomla! 1.7.1 Joomla! 1.7.2 Joomla! 1.7.3 Joomla! 1.7.4 Joomla! 1.7.5 Joomla! 2.5.0 Joomla Joomla! 2.5.0 Beta1 (not an official CPE) Joomla Joomla! 2.5.0 Beta2 (not an official CPE) Joomla Joomla! 2.5.0 Rc1 (not an official CPE) Joomla! 2.5.1 Joomla! 2.5.2 Joomla! 2.5.3 Joomla! 2.5.4 Joomla! 2.5.5 Joomla! 2.5.6 Joomla! 2.5.7 Joomla! 2.5.8 Joomla! 2.5.9 Joomla! 2.5.10 Joomla! 2.5.11 Joomla! 2.5.12 Joomla! 2.5.13 Joomla! 2.5.14 Joomla Joomla! 2.5.15 (not an official CPE) Joomla Joomla! 2.5.16 (not an official CPE) Joomla Joomla! 2.5.17 (not an official CPE) Joomla Joomla! 2.5.17 Rc (not an official CPE) Joomla Joomla! 2.5.18 (not an official CPE) Joomla Joomla! 2.5.18 Rc (not an official CPE) Joomla Joomla! 2.5.19 (not an official CPE) Joomla Joomla! 2.5.20 (not an official CPE) Joomla Joomla! 2.5.21 (not an official CPE) Joomla Joomla! 2.5.21 Rc (not an official CPE) Joomla Joomla! 2.5.22 (not an official CPE) Joomla Joomla! 2.5.23 (not an official CPE) Joomla Joomla! 2.5.23 Rc (not an official CPE) Joomla Joomla! 2.5.24 (not an official CPE) Joomla Joomla! 2.5.25 (not an official CPE) Joomla Joomla! 2.5.26 (not an official CPE) Joomla Joomla! 2.5.27 (not an official CPE) Joomla Joomla! 2.5.28 (not an official CPE) Joomla Joomla! 2.5.28 Rc (not an official CPE) Joomla Joomla! 2.5.28 Rc2 (not an official CPE) Joomla! 3.0.0 Joomla Joomla! 3.0.0 Alpha1 (not an official CPE) Joomla Joomla! 3.0.0 Alpha2 (not an official CPE) Joomla Joomla! 3.0.0 Beta1 (not an official CPE) Joomla! 3.0.1 Joomla! 3.0.2 Joomla! 3.0.3 Joomla! 3.0.4 Joomla! 3.1.0 Joomla Joomla! 3.1.0 Beta1 (not an official CPE) Joomla Joomla! 3.1.0 Beta2 (not an official CPE) Joomla Joomla! 3.1.0 Beta3 (not an official CPE) Joomla Joomla! 3.1.0 Beta4 (not an official CPE) Joomla Joomla! 3.1.0 Beta5 (not an official CPE) Joomla! 3.1.1 Joomla! 3.1.2 Joomla! 3.1.3 Joomla! 3.1.4 Joomla! 3.1.5 Joomla Joomla! 3.1.6 (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.2.0 Alpha (not an official CPE) Joomla Joomla! 3.2.0 Beta (not an official CPE) Joomla Joomla! 3.2.0 Beta2 (not an official CPE) Joomla Joomla! 3.2.0 Rc (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.1 Rc (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.2 Rc (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.1 Rc (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.2 Rc (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.4 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.4.0 Joomla! 3.4.0 Alpha Joomla! 3.4.0 Beta 1 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Release Candidate 2 Joomla Joomla! 3.4.2 - (not an official CPE) Joomla! 3.4.2 Release Candidate 1 Joomla Joomla! 3.4.3 (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.4 Rc (not an official CPE) Joomla Joomla! 3.4.4 Rc2 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.5.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.7.0 Alpha1 (not an official CPE) Joomla Joomla! 3.7.0 Alpha2 (not an official CPE) Joomla Joomla! 3.7.0 Beta1 (not an official CPE) Joomla Joomla! 3.7.0 Beta2 (not an official CPE) Joomla Joomla! 3.7.0 Beta3 (not an official CPE) Joomla Joomla! 3.7.0 Beta4 (not an official CPE) Joomla Joomla! 3.7.0 Rc1 (not an official CPE) Joomla Joomla! 3.7.0 Rc2 (not an official CPE) Joomla Joomla! 3.7.0 Rc3 (not an official CPE) Joomla Joomla! 3.7.0 Rc4 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.1 Rc1 (not an official CPE) Joomla Joomla! 3.7.1 Rc2 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.3 Beta1 (not an official CPE) Joomla Joomla! 3.7.3 Rc1 (not an official CPE) Joomla Joomla! 3.7.3 Rc2 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.4 Beta1 (not an official CPE) Joomla Joomla! 3.7.4 Rc1 (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.8.0 - (not an official CPE) Joomla Joomla! 3.8.0 Beta1 (not an official CPE) Joomla Joomla! 3.8.0 Rc1 (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE) Joomla Joomla! 3.8.1 Rc (not an official CPE) Joomla Joomla! 3.8.2 (not an official CPE) Joomla Joomla! 3.8.2 - (not an official CPE) Joomla Joomla! 3.8.2 Rc (not an official CPE) Joomla Joomla! 3.8.3 (not an official CPE) Joomla Joomla! 3.8.3 - (not an official CPE) Joomla Joomla! 3.8.3 Rc (not an official CPE) Joomla Joomla! 3.8.4 (not an official CPE) Joomla Joomla! 3.8.4 - (not an official CPE) Joomla Joomla! 3.8.4 Rc (not an official CPE) Joomla Joomla! 3.8.4 Rc2 (not an official CPE) Joomla Joomla! 3.8.5 (not an official CPE) Joomla Joomla! 3.8.5 - (not an official CPE) Joomla Joomla! 3.8.5 Rc (not an official CPE) Joomla Joomla! 3.8.6 (not an official CPE) Joomla Joomla! 3.8.6 - (not an official CPE) Joomla Joomla! 3.8.6 Rc1 (not an official CPE) Joomla Joomla! 3.8.7 (not an official CPE) Joomla Joomla! 3.8.7 - (not an official CPE) Joomla Joomla! 3.8.7 Rc (not an official CPE) Joomla Joomla! 3.8.8 (not an official CPE) Joomla Joomla! 3.8.8 - (not an official CPE) Joomla Joomla! 3.8.8 Rc (not an official CPE) Joomla Joomla! 3.8.9 (not an official CPE) Joomla Joomla! 3.8.9 - (not an official CPE) Joomla Joomla! 3.8.9 Rc (not an official CPE) Joomla Joomla! 3.8.10 (not an official CPE) Joomla Joomla! 3.8.11 (not an official CPE) Joomla Joomla! 3.8.11 - (not an official CPE) Joomla Joomla! 3.8.11 Rc (not an official CPE) Joomla Joomla! 3.8.12 (not an official CPE) Joomla Joomla! 3.8.12 - (not an official CPE) Joomla Joomla! 3.8.12 Rc (not an official CPE) Joomla Joomla! 3.8.13 (not an official CPE) Joomla Joomla! 3.9.0 - (not an official CPE) Joomla Joomla! 3.9.0 Alpha (not an official CPE) Joomla Joomla! 3.9.0 Beta (not an official CPE) Joomla Joomla! 3.9.0 Beta2 (not an official CPE) Joomla Joomla! 3.9.0 Beta3 (not an official CPE) Joomla Joomla! 3.9.0 Beta4 (not an official CPE) Joomla Joomla! 3.9.0 Rc (not an official CPE) Joomla Joomla! 3.9.0 Rc2 (not an official CPE) Joomla Joomla! 3.9.1 - (not an official CPE) Joomla Joomla! 3.9.1 Rc (not an official CPE) Joomla Joomla! 3.9.2 - (not an official CPE) Joomla Joomla! 3.9.2 Rc (not an official CPE) Joomla Joomla! 3.9.3 Rc1 (not an official CPE) Joomla Joomla! 3.9.4 (not an official CPE) Joomla Joomla! 3.9.4 Rc1 (not an official CPE) Joomla Joomla! 3.9.5 Rc1 (not an official CPE)