CVEvulnerability
CVE-2012-2901
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to administrator/index.php.
Affected configurations
• ryan demmer joomla content editor (<= 2.0.21)
• ryan demmer joomla content editor 2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/49206 Vendor Advisory
- http://secunia.com/secunia_research/2012-14/ Vendor Advisory
- http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32 www.joomlacontenteditor.net
- http://www.securityfocus.com/bid/53559 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75670 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/49206 Vendor Advisory
- http://secunia.com/secunia_research/2012-14/ Vendor Advisory
- http://www.joomlacontenteditor.net/news/item/jce-21-released?category_id=32 www.joomlacontenteditor.net
- http://www.securityfocus.com/bid/53559 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75670 exchange.xforce.ibmcloud.com