CVE-2012-4071: XSS
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (comrsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4071?
CVE-2012-4071 is classified as a medium severity vulnerability due to its potential to exploit cross-site scripting in affected applications.
How do I fix CVE-2012-4071?
To fix CVE-2012-4071, update the RSGallery2 component to version 2.3.0 or higher for Joomla! 1.5.x, and to version 3.2.0 or higher for Joomla! 2.5.x.
What versions of RSGallery2 are affected by CVE-2012-4071?
CVE-2012-4071 affects RSGallery2 versions up to and including 2.2.1 for Joomla! 1.5.x and up to and including 3.1.0 for Joomla! 2.5.x.
Can CVE-2012-4071 be exploited remotely?
Yes, CVE-2012-4071 can be exploited remotely by attackers to inject arbitrary web scripts or HTML through the comments module.
What component is impacted by CVE-2012-4071?
CVE-2012-4071 impacts the RSGallery2 (com_rsgallery2) component used in Joomla! installations.