CVE-2011-4332: XSS
Published Nov 23, 2011
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
25 affected componentsFixes available
Joomla Joomla\!=1.6-beta15
Joomla Joomla\!=1.6.4
Joomla Joomla\!=1.6-beta12
Joomla Joomla\!=1.6-beta3
Joomla Joomla\!=1.6-beta13
Joomla Joomla\!=1.6.5
Joomla Joomla\!=1.6.1
Joomla Joomla\!=1.6-beta8
Joomla Joomla\!=1.6-beta5
Joomla Joomla\!=1.6.0
Joomla Joomla\!=1.6-beta1
Joomla Joomla\!=1.6-beta6
Joomla Joomla\!<=1.6.3
Joomla Joomla\!=1.6-beta7
Joomla Joomla\!=1.6.6
Joomla Joomla\!=1.6-beta14
Joomla Joomla\!=1.6-beta11
Joomla Joomla\!=1.6-beta2
Joomla Joomla\!=1.6-alpha2
Joomla Joomla\!=1.6-alpha
Joomla Joomla\!=1.6-beta4
Joomla Joomla\!=1.6-rc1
Joomla Joomla\!=1.6-beta9
Joomla Joomla\!=1.6-beta10
composer/joomla/joomla-cms<=1.6.3
1.6.4
Event History
Nov 23, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:55 PM
DescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·05:36 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4332?
CVE-2011-4332 has a moderate severity level due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2011-4332?
To fix CVE-2011-4332, you should update Joomla! to version 1.6.6 or later, which addresses the XSS vulnerabilities.
3
What types of attacks are possible due to CVE-2011-4332?
CVE-2011-4332 allows attackers to perform cross-site scripting attacks, potentially leading to the theft of sensitive information.
4
Which versions of Joomla! are affected by CVE-2011-4332?
CVE-2011-4332 affects Joomla! versions 1.6.3 and earlier, including several beta and alpha versions.
5
Can CVE-2011-4332 be exploited remotely?
Yes, CVE-2011-4332 can be exploited remotely by attackers to inject arbitrary web script or HTML.