CVE-2013-3059: XSS
Published May 3, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
14 affected components
Joomla Joomla\!=2.5.0
Joomla Joomla\!=2.5.1
Joomla Joomla\!=2.5.2
Joomla Joomla\!=2.5.3
Joomla Joomla\!=2.5.4
Joomla Joomla\!=2.5.5
Joomla Joomla\!=2.5.6
Joomla Joomla\!=2.5.7
Joomla Joomla\!=2.5.8
Joomla Joomla\!=2.5.9
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Event History
May 3, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3059?
CVE-2013-3059 is rated as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary web scripts.
2
How do I fix CVE-2013-3059?
To fix CVE-2013-3059, update Joomla to version 2.5.10 or 3.0.4 or later.
3
What software versions are affected by CVE-2013-3059?
CVE-2013-3059 affects Joomla versions 2.5.0 to 2.5.9 and 3.0.0 to 3.0.3.
4
What type of vulnerability is CVE-2013-3059?
CVE-2013-3059 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-3059 be exploited by attackers?
Yes, CVE-2013-3059 can be exploited by remote attackers to inject malicious scripts into web pages.