CVE-2010-2535: XSS
Published Oct 5, 2010
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens.
Affected Software
21 affected components
Joomla Joomla\!=1.5.11
Joomla Joomla\!=1.5.13
Joomla Joomla\!=1.5.3
Joomla Joomla\!=1.5.2
Joomla Joomla\!=1.5.9
Joomla Joomla\!=1.5.18
Joomla Joomla\!=1.5.16
Joomla Joomla\!=1.5.4
Joomla Joomla\!=1.5.10
Joomla Joomla\!=1.5.7
Joomla Joomla\!=1.5.0
Joomla Joomla\!=1.5.15
Joomla Joomla\!=1.5.6
Joomla Joomla\!=1.5.1
Joomla Joomla\!=1.5.17
Joomla Joomla\!=1.5.8
Joomla Joomla\!=1.5.19
Joomla Joomla\!=1.5.12
Joomla Joomla\!=1.5.5
Joomla Joomla\!=1.5.15-rc
Joomla Joomla\!=1.5.14
Event History
Oct 5, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2535?
CVE-2010-2535 is classified as a high severity vulnerability due to its ability to allow remote authenticated users to perform cross-site scripting attacks.
2
How do I fix CVE-2010-2535?
To fix CVE-2010-2535, you should upgrade Joomla! to version 1.5.20 or later.
3
Who is affected by CVE-2010-2535?
CVE-2010-2535 affects Joomla! versions 1.5.x prior to 1.5.20.
4
What type of vulnerability is CVE-2010-2535?
CVE-2010-2535 is characterized as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2010-2535 be exploited by unauthenticated users?
No, CVE-2010-2535 requires the attacker to be an authenticated user to exploit the vulnerability.