CVE-2014-6631: XSS

Published Oct 8, 2014

Updated

Cross-site scripting (XSS) vulnerability in commedia in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

9 affected components

Joomla Joomla\!=3.2.0

Joomla Joomla\!=3.2.1

Joomla Joomla\!=3.2.2

Joomla Joomla\!=3.2.3

Joomla Joomla\!=3.2.4

Joomla Joomla\!=3.3.0

Joomla Joomla\!=3.3.1

Joomla Joomla\!=3.3.2

Joomla Joomla\!=3.3.3

Event History

Oct 8, 2014

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6631?

The severity of CVE-2014-6631 is classified as a medium risk due to its potential for cross-site scripting attacks.

How do I fix CVE-2014-6631?

To fix CVE-2014-6631, you should upgrade Joomla! to version 3.2.5 or later, or 3.3.4 or later.

Which versions of Joomla! are affected by CVE-2014-6631?

CVE-2014-6631 affects Joomla! versions 3.2.0 through 3.2.4 and 3.3.0 through 3.3.3.

What type of vulnerability is CVE-2014-6631?

CVE-2014-6631 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.

Who can be impacted by CVE-2014-6631?

Website users and administrators of affected Joomla! versions can be impacted by CVE-2014-6631 due to potential exploitation by attackers.