CVE-2017-11612: XSS
Published Jul 26, 2017
·Updated
In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components.
Affected Software
160 affected components
Joomla Joomla\!=1.5.0
Joomla Joomla\!=1.5.1
Joomla Joomla\!=1.5.2
Joomla Joomla\!=1.5.3
Joomla Joomla\!=1.5.4
Joomla Joomla\!=1.5.5
Joomla Joomla\!=1.5.6
Joomla Joomla\!=1.5.7
Joomla Joomla\!=1.5.8
Joomla Joomla\!=1.5.9
Joomla Joomla\!=1.5.10
Joomla Joomla\!=1.5.11
Joomla Joomla\!=1.5.12
Joomla Joomla\!=1.5.13
Joomla Joomla\!=1.5.14
Joomla Joomla\!=1.5.15
Joomla Joomla\!=1.5.15-rc
Joomla Joomla\!=1.5.16
Joomla Joomla\!=1.5.17
Joomla Joomla\!=1.5.18
Joomla Joomla\!=1.5.19
Joomla Joomla\!=1.5.20
Joomla Joomla\!=1.5.21
Joomla Joomla\!=1.5.22
Joomla Joomla\!=1.5.23
Joomla Joomla\!=1.5.24
Joomla Joomla\!=1.5.25
Joomla Joomla\!=1.5.26
Joomla Joomla\!=1.6-alpha
Joomla Joomla\!=1.6-alpha2
Joomla Joomla\!=1.6-beta1
Joomla Joomla\!=1.6-beta10
Joomla Joomla\!=1.6-beta11
Joomla Joomla\!=1.6-beta12
Joomla Joomla\!=1.6-beta13
Joomla Joomla\!=1.6-beta14
Joomla Joomla\!=1.6-beta15
Joomla Joomla\!=1.6-beta2
Joomla Joomla\!=1.6-beta3
Joomla Joomla\!=1.6-beta4
Joomla Joomla\!=1.6-beta5
Joomla Joomla\!=1.6-beta6
Joomla Joomla\!=1.6-beta7
Joomla Joomla\!=1.6-beta8
Joomla Joomla\!=1.6-beta9
Joomla Joomla\!=1.6-rc1
Joomla Joomla\!=1.6.0
Joomla Joomla\!=1.6.1
Joomla Joomla\!=1.6.2
Joomla Joomla\!=1.6.3
Joomla Joomla\!=1.6.4
Joomla Joomla\!=1.6.5
Joomla Joomla\!=1.6.6
Joomla Joomla\!=1.7.0
Joomla Joomla\!=1.7.1
Joomla Joomla\!=1.7.2
Joomla Joomla\!=1.7.3
Joomla Joomla\!=1.7.4
Joomla Joomla\!=1.7.5
Joomla Joomla\!=2.5.0
Joomla Joomla\!=2.5.1
Joomla Joomla\!=2.5.2
Joomla Joomla\!=2.5.3
Joomla Joomla\!=2.5.4
Joomla Joomla\!=2.5.5
Joomla Joomla\!=2.5.6
Joomla Joomla\!=2.5.7
Joomla Joomla\!=2.5.8
Joomla Joomla\!=2.5.9
Joomla Joomla\!=2.5.10
Joomla Joomla\!=2.5.11
Joomla Joomla\!=2.5.12
Joomla Joomla\!=2.5.13
Joomla Joomla\!=2.5.14
Joomla Joomla\!=2.5.15
Joomla Joomla\!=2.5.16
Joomla Joomla\!=2.5.17
Joomla Joomla\!=2.5.18
Joomla Joomla\!=2.5.19
Joomla Joomla\!=2.5.20
Joomla Joomla\!=2.5.21
Joomla Joomla\!=2.5.22
Joomla Joomla\!=2.5.23
Joomla Joomla\!=2.5.24
Joomla Joomla\!=2.5.25
Joomla Joomla\!=2.5.26
Joomla Joomla\!=2.5.27
Joomla Joomla\!=2.5.28
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Joomla Joomla\!=3.0.4
Joomla Joomla\!=3.1.0
Joomla Joomla\!=3.1.1
Joomla Joomla\!=3.1.2
Joomla Joomla\!=3.1.3
Joomla Joomla\!=3.1.4
Joomla Joomla\!=3.1.5
Joomla Joomla\!=3.1.6
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Joomla Joomla\!=3.2.3
Joomla Joomla\!=3.2.4
Joomla Joomla\!=3.3.0
Joomla Joomla\!=3.3.1
Joomla Joomla\!=3.3.2
Joomla Joomla\!=3.3.3
Joomla Joomla\!=3.3.4
Joomla Joomla\!=3.3.5
Joomla Joomla\!=3.4.0
Joomla Joomla\!=3.4.0-alpha
Joomla Joomla\!=3.4.0-beta1
Joomla Joomla\!=3.4.0-beta2
Joomla Joomla\!=3.4.0-beta3
Joomla Joomla\!=3.4.0-rc1
Joomla Joomla\!=3.4.1
Joomla Joomla\!=3.4.1-rc1
Joomla Joomla\!=3.4.1-rc2
Joomla Joomla\!=3.4.2-rc1
Joomla Joomla\!=3.4.3
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Joomla Joomla\!=3.4.6
Joomla Joomla\!=3.4.7
Joomla Joomla\!=3.4.8
Joomla Joomla\!=3.4.8-rc
Joomla Joomla\!=3.5.0
Joomla Joomla\!=3.5.0-beta
Joomla Joomla\!=3.5.0-beta2
Joomla Joomla\!=3.5.0-beta3
Joomla Joomla\!=3.5.0-beta4
Joomla Joomla\!=3.5.0-beta5
Joomla Joomla\!=3.5.0-rc
Joomla Joomla\!=3.5.0-rc2
Joomla Joomla\!=3.5.0-rc3
Joomla Joomla\!=3.5.0-rc4
Joomla Joomla\!=3.5.1
Joomla Joomla\!=3.5.1-rc
Joomla Joomla\!=3.6.0
Joomla Joomla\!=3.6.0-alpha
Joomla Joomla\!=3.6.0-beta1
Joomla Joomla\!=3.6.0-beta2
Joomla Joomla\!=3.6.0-rc
Joomla Joomla\!=3.6.0-rc2
Joomla Joomla\!=3.6.1
Joomla Joomla\!=3.6.1-rc1
Joomla Joomla\!=3.6.1-rc2
Joomla Joomla\!=3.6.2
Joomla Joomla\!=3.6.3
Joomla Joomla\!=3.6.3-rc1
Joomla Joomla\!=3.6.3-rc2
Joomla Joomla\!=3.6.3-rc3
Joomla Joomla\!=3.6.4
Joomla Joomla\!=3.6.5
Joomla Joomla\!=3.7.0
Joomla Joomla\!=3.7.1
Joomla Joomla\!=3.7.2
Joomla Joomla\!=3.7.3
Event History
Jul 26, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11612?
CVE-2017-11612 has a medium severity rating due to its potential for XSS exploitation in affected Joomla! versions.
2
How do I fix CVE-2017-11612?
To fix CVE-2017-11612, update your Joomla! installation to version 3.7.4 or later, which addresses the vulnerability.
3
Which Joomla! versions are affected by CVE-2017-11612?
Joomla! versions prior to 3.7.4, including all versions starting from 1.5.0 up to 3.7.3, are affected by CVE-2017-11612.
4
What type of vulnerability is CVE-2017-11612?
CVE-2017-11612 is classified as a Cross-Site Scripting (XSS) vulnerability affecting multiple components of Joomla!
5
What can attackers do with CVE-2017-11612?
Attackers exploiting CVE-2017-11612 can inject malicious scripts into web pages viewed by other users, potentially compromising user data.