CVE-2010-4794: XSS

Published Apr 27, 2011

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (comjscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php. NOTE: some of these details are obtained from third party information.

Affected Software

3 affected components

JoomlaSeller Com Jscalendar=1.5.1

JoomlaSeller Com Jscalendar=1.5.4

Joomla Joomla\!

Event History

Apr 27, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

12:55 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4794?

CVE-2010-4794 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary scripts.

How do I fix CVE-2010-4794?

To fix CVE-2010-4794, upgrade the JoomlaSeller JS Calendar component to a version later than 1.5.4 which addresses the cross-site scripting vulnerabilities.

What components are affected by CVE-2010-4794?

CVE-2010-4794 affects JoomlaSeller JS Calendar versions 1.5.1 and 1.5.4.

What type of vulnerability is CVE-2010-4794?

CVE-2010-4794 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.

Can CVE-2010-4794 be exploited without user interaction?

Yes, CVE-2010-4794 can be exploited without user interaction by sending crafted requests to the affected Joomla sites.