What is GHSA-fj57-vhrc-73r7?

GHSA-fj57-vhrc-73r7 is a security advisory published by GitHub Security Advisories with Medium severity. Joomla! vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-fj57-vhrc-73r7 cover?

GHSA-fj57-vhrc-73r7 covers the following CVE IDs: CVE-2010-1649. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-fj57-vhrc-73r7?

GHSA-fj57-vhrc-73r7 affects 1 product, including: composer/joomla/joomla-cms:\u003e= 1.5, \u003c= 1.5.17.

GHSA-fj57-vhrc-73r7Medium

Joomla! vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2010-1649 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php.

🎯 Affected products1

composer/joomla/joomla-cms:>= 1.5, <= 1.5.17

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2010-1649
http://developer.joomla.org/security/news/314-20100501-core-xss-vulnerabilities-in-back-end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla!+Security+News%29
http://developer.joomla.org/security/news/314-20100501-core-xss-vulnerabilities-in-back-end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla%21+Security+News%29
https://web.archive.org/web/20200228225430/https://www.securityfocus.com/bid/40444
https://github.com/advisories/GHSA-fj57-vhrc-73r7