Miembros de
Boletines de Vulnerabilidades |
[20170404] - Core - XSS Vulnerability |
|
| Software afectado | Joomla |
|
Project: Joomla! SubProject: CMS Severity: Low Versions: 1.5.0 through 3.6.5 Exploit type: XSS Reported Date: 2017-February-22 Fixed Date: 2017-April-25 CVE Number: CVE-2017-7986 Description Inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components. Affected Installs Joomla! CMS versions 1.5.0 through 3.6.5 Solution Upgrade to version 3.7.0 Contact The JSST at the Joomla! Security Centre. Reported By: Fortinets FortiGuard Labs More info: http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/eeKSY-lLIXw/686-20170404-core-xss-vulnerability.html |
|
