PT-2017-5752 · Joomla · Joomla! Googlemaps Plugin
CVE-2013-7430
·
Publicado
2017-08-28
·
Atualizado
2024-02-14
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
Joomla! Googlemaps plugin versions prior to 3.1
Description:
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the
xmlns parameter. This could potentially lead to unauthorized actions on the affected system.Recommendations:
For versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Googlemaps plugin until the update is applied. Avoid using the
xmlns parameter in the affected plugin until the issue is resolved.Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Joomla! Googlemaps Plugin