2019-03-12 19:29:00 2019-03-15 17:00:24

An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Joomla Joomla! 3.8.11 Rc (not an official CPE) Joomla Joomla! 3.8.11 (not an official CPE) Joomla Joomla! 3.8.10 (not an official CPE) Joomla Joomla! 3.8.9 Rc (not an official CPE) Joomla Joomla! 3.8.9 (not an official CPE) Joomla Joomla! 3.8.8 Rc (not an official CPE) Joomla Joomla! 3.8.8 (not an official CPE) Joomla Joomla! 3.8.7 Rc (not an official CPE) Joomla Joomla! 3.8.7 (not an official CPE) Joomla Joomla! 3.8.6 Rc1 (not an official CPE) Joomla Joomla! 3.8.6 (not an official CPE) Joomla Joomla! 3.8.5 Rc (not an official CPE) Joomla Joomla! 3.8.5 (not an official CPE) Joomla Joomla! 3.8.4 Rc2 (not an official CPE) Joomla Joomla! 3.8.4 Rc (not an official CPE) Joomla Joomla! 3.8.4 (not an official CPE) Joomla Joomla! 3.8.3 Rc (not an official CPE) Joomla Joomla! 3.8.3 (not an official CPE) Joomla Joomla! 3.8.2 Rc (not an official CPE) Joomla Joomla! 3.8.2 (not an official CPE) Joomla Joomla! 3.8.1 Rc (not an official CPE) Joomla Joomla! 3.8.1 (not an official CPE) Joomla Joomla! 3.8.0 Rc1 (not an official CPE) Joomla Joomla! 3.8.0 Beta1 (not an official CPE) Joomla Joomla! 3.8.0 - (not an official CPE) Joomla Joomla! 3.7.5 (not an official CPE) Joomla Joomla! 3.7.4 Rc1 (not an official CPE) Joomla Joomla! 3.7.4 Beta1 (not an official CPE) Joomla Joomla! 3.7.4 (not an official CPE) Joomla Joomla! 3.7.3 Rc2 (not an official CPE) Joomla Joomla! 3.7.3 Rc1 (not an official CPE) Joomla Joomla! 3.7.3 Beta1 (not an official CPE) Joomla Joomla! 3.7.3 (not an official CPE) Joomla Joomla! 3.7.2 (not an official CPE) Joomla Joomla! 3.7.1 Rc2 (not an official CPE) Joomla Joomla! 3.7.1 Rc1 (not an official CPE) Joomla Joomla! 3.7.1 (not an official CPE) Joomla Joomla! 3.7.0 Rc4 (not an official CPE) Joomla Joomla! 3.7.0 Rc3 (not an official CPE) Joomla Joomla! 3.7.0 Rc2 (not an official CPE) Joomla Joomla! 3.7.0 Rc1 (not an official CPE) Joomla Joomla! 3.7.0 Beta4 (not an official CPE) Joomla Joomla! 3.7.0 Beta3 (not an official CPE) Joomla Joomla! 3.7.0 Beta2 (not an official CPE) Joomla Joomla! 3.7.0 Beta1 (not an official CPE) Joomla Joomla! 3.7.0 Alpha2 (not an official CPE) Joomla Joomla! 3.7.0 Alpha1 (not an official CPE) Joomla Joomla! 3.7.0 (not an official CPE) Joomla Joomla! 3.6.5 (not an official CPE) Joomla Joomla! 3.6.4 (not an official CPE) Joomla Joomla! 3.6.3 Rc3 (not an official CPE) Joomla Joomla! 3.6.3 Rc2 (not an official CPE) Joomla Joomla! 3.6.3 Rc1 (not an official CPE) Joomla Joomla! 3.6.3 (not an official CPE) Joomla Joomla! 3.6.2 (not an official CPE) Joomla Joomla! 3.6.1 Rc2 (not an official CPE) Joomla Joomla! 3.6.1 Rc1 (not an official CPE) Joomla Joomla! 3.6.1 (not an official CPE) Joomla Joomla! 3.6.0 Rc2 (not an official CPE) Joomla Joomla! 3.6.0 Rc (not an official CPE) Joomla Joomla! 3.6.0 Beta2 (not an official CPE) Joomla Joomla! 3.6.0 Beta1 (not an official CPE) Joomla Joomla! 3.6.0 Alpha (not an official CPE) Joomla Joomla! 3.6.0 (not an official CPE) Joomla Joomla! 3.5.1 Rc2 (not an official CPE) Joomla Joomla! 3.5.1 Rc (not an official CPE) Joomla Joomla! 3.5.1 (not an official CPE) Joomla Joomla! 3.5.0 Rc4 (not an official CPE) Joomla Joomla! 3.5.0 Rc3 (not an official CPE) Joomla Joomla! 3.5.0 Rc2 (not an official CPE) Joomla Joomla! 3.5.0 Rc (not an official CPE) Joomla Joomla! 3.5.0 Beta5 (not an official CPE) Joomla Joomla! 3.5.0 Beta4 (not an official CPE) Joomla Joomla! 3.5.0 Beta3 (not an official CPE) Joomla Joomla! 3.5.0 Beta2 (not an official CPE) Joomla Joomla! 3.5.0 Beta (not an official CPE) Joomla Joomla! 3.5.0 (not an official CPE) Joomla Joomla! 3.4.8 Rc (not an official CPE) Joomla Joomla! 3.4.8 (not an official CPE) Joomla Joomla! 3.4.7 (not an official CPE) Joomla Joomla! 3.4.6 (not an official CPE) Joomla Joomla! 3.4.5 (not an official CPE) Joomla Joomla! 3.4.4 Rc2 (not an official CPE) Joomla Joomla! 3.4.4 Rc (not an official CPE) Joomla Joomla! 3.4.4 (not an official CPE) Joomla Joomla! 3.4.3 (not an official CPE) Joomla! 3.4.2 Release Candidate 1 Joomla Joomla! 3.4.2 - (not an official CPE) Joomla! 3.4.1 Release Candidate 2 Joomla! 3.4.1 Release Candidate 1 Joomla! 3.4.1 Joomla! 3.4.0 Release Candidate 1 Joomla! 3.4.0 Beta 3 Joomla! 3.4.0 Beta 2 Joomla! 3.4.0 Beta 1 Joomla Joomla! 3.8.12 (not an official CPE) Joomla! 3.4.0 Alpha Joomla! 3.4.0 Joomla Joomla! 3.3.6 (not an official CPE) Joomla! 3.3.5 Joomla Joomla! 3.3.4 (not an official CPE) Joomla Joomla! 3.3.3 (not an official CPE) Joomla Joomla! 3.3.2 Rc (not an official CPE) Joomla Joomla! 3.3.2 (not an official CPE) Joomla Joomla! 3.3.1 Rc (not an official CPE) Joomla Joomla! 3.3.1 (not an official CPE) Joomla Joomla! 3.3.0 (not an official CPE) Joomla Joomla! 3.2.7 (not an official CPE) Joomla Joomla! 3.2.6 (not an official CPE) Joomla Joomla! 3.2.4 (not an official CPE) Joomla Joomla! 3.2.3 (not an official CPE) Joomla Joomla! 3.2.2 Rc (not an official CPE) Joomla Joomla! 3.2.2 (not an official CPE) Joomla Joomla! 3.2.1 Rc (not an official CPE) Joomla Joomla! 3.2.1 (not an official CPE) Joomla Joomla! 3.2.0 Rc (not an official CPE) Joomla Joomla! 3.2.0 Beta2 (not an official CPE) Joomla Joomla! 3.2.0 Beta (not an official CPE) Joomla Joomla! 3.2.0 Alpha (not an official CPE) Joomla Joomla! 3.2.0 (not an official CPE) Joomla Joomla! 3.8.12 Rc (not an official CPE) Joomla Joomla! 3.8.13 (not an official CPE) Joomla Joomla! 3.9.0 - (not an official CPE) Joomla Joomla! 3.9.0 Alpha (not an official CPE) Joomla Joomla! 3.9.0 Beta (not an official CPE) Joomla Joomla! 3.9.0 Beta2 (not an official CPE) Joomla Joomla! 3.9.0 Beta3 (not an official CPE) Joomla Joomla! 3.9.0 Beta4 (not an official CPE) Joomla Joomla! 3.9.0 Rc (not an official CPE) Joomla Joomla! 3.9.0 Rc2 (not an official CPE) Joomla Joomla! 3.9.1 - (not an official CPE) Joomla Joomla! 3.9.1 Rc (not an official CPE) Joomla Joomla! 3.9.2 - (not an official CPE) Joomla Joomla! 3.9.2 Rc (not an official CPE)