What is GHSA-5xmg-w578-gq5j?

GHSA-5xmg-w578-gq5j is a security advisory published by GitHub Security Advisories with Low severity. Joomla! Cross-site Scripting vulnerability

Which CVE IDs does GHSA-5xmg-w578-gq5j cover?

GHSA-5xmg-w578-gq5j covers the following CVE IDs: CVE-2013-5583. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-5xmg-w578-gq5j?

GHSA-5xmg-w578-gq5j affects 1 product, including: composer/joomla/joomla-cms:\u003c= 3.1.5.

GHSA-5xmg-w578-gq5jLow

Joomla! Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2013-5583 →

📋 Description

Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

🎯 Affected products1

composer/joomla/joomla-cms:<= 3.1.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2013-5583
https://github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f
https://web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability
https://web.archive.org/web/20130810103125/http://www.securityfocus.com/bid/61600
https://github.com/advisories/GHSA-5xmg-w578-gq5j