CVE-2014-7982: XSS
Published Oct 8, 2014
·Updated
Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
34 affected components
Joomla Joomla\!=2.5.0
Joomla Joomla\!=2.5.1
Joomla Joomla\!=2.5.2
Joomla Joomla\!=2.5.3
Joomla Joomla\!=2.5.4
Joomla Joomla\!=2.5.5
Joomla Joomla\!=2.5.6
Joomla Joomla\!=2.5.7
Joomla Joomla\!=2.5.8
Joomla Joomla\!=2.5.9
Joomla Joomla\!=2.5.10
Joomla Joomla\!=2.5.11
Joomla Joomla\!=2.5.12
Joomla Joomla\!=2.5.13
Joomla Joomla\!=2.5.14
Joomla Joomla\!=2.5.15
Joomla Joomla\!=2.5.16
Joomla Joomla\!=2.5.17
Joomla Joomla\!=2.5.18
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Joomla Joomla\!=3.0.4
Joomla Joomla\!=3.1.0
Joomla Joomla\!=3.1.1
Joomla Joomla\!=3.1.2
Joomla Joomla\!=3.1.3
Joomla Joomla\!=3.1.4
Joomla Joomla\!=3.1.5
Joomla Joomla\!=3.1.6
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Event History
Oct 8, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-7982?
CVE-2014-7982 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-7982?
To fix CVE-2014-7982, update Joomla! CMS to version 2.5.19 or 3.2.3 or later.
3
What types of attacks can CVE-2014-7982 enable?
CVE-2014-7982 can enable remote attackers to execute arbitrary web scripts or HTML in the affected Joomla! instances.
4
Which versions of Joomla! are affected by CVE-2014-7982?
CVE-2014-7982 affects Joomla! CMS versions 2.5.x before 2.5.19 and 3.x before 3.2.3.
5
Is CVE-2014-7982 a known vulnerability in Joomla?
Yes, CVE-2014-7982 is a well-documented cross-site scripting vulnerability that has been disclosed and addressed by Joomla.