Description
Cross-Site Scripting (XSS) attacks occur when malicious scripts are injected into trusted websites, often through user inputs, and executed in the browsers of other users. These attacks exploit vulnerabilities in web applications that fail to properly validate or encode user input, allowing attackers to steal sensitive information, hijack user sessions, deface websites, and more.
Recommendation
Upgrade Joomla! to the latest stable version.
References
- Joomla!
- OWASP: Cross Site Scripting (XSS)
- OWASP: XSS Prevention Cheat Sheet
- OWASP: ESAPI project
- CWE-20
- CWE-79
- CAPEC-63
- CAPEC-310
- OWASP 2021-A3
- OWASP 2021-A6
Related Issues
- Joomla! 1.5 < 3.4.5 RCE - CVE-2015-8562
- Joomla! 3.2.1 SQLI - Vulnerability
- Joomla! Component Com_cbcontact 'contact_id' SQLI - Vulnerability
- Joomla! Component Com_fields 3.7 SQLI - Vulnerability
- Tags:
- Joomla
- XSS
- Injection
Anything's wrong? Let us know Last updated on May 13, 2024