GHSA-fj57-vhrc-73r7

Suggest an improvement
Source
https://github.com/advisories/GHSA-fj57-vhrc-73r7
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-fj57-vhrc-73r7/GHSA-fj57-vhrc-73r7.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-fj57-vhrc-73r7
Aliases
  • CVE-2010-1649
Published
2022-05-14T03:08:11Z
Modified
2025-04-12T02:12:05Z
Summary
Joomla! vulnerable to Cross-site Scripting
Details

Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php.

Database specific 
{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-04-12T01:08:09Z",
    "nvd_published_at":  "2010-06-08T00:30:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / joomla/joomla-cms

Package

Name
joomla/joomla-cms
Purl
pkg:composer/joomla/joomla-cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.5
Fixed
1.5.18

Database specific

last_known_affected_version_range 
"<= 1.5.17"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-fj57-vhrc-73r7/GHSA-fj57-vhrc-73r7.json"