CVE-2017-9934: XSS
Published Jul 17, 2017
·Updated
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.
Affected Software
103 affected components
Joomla Joomla\!=1.7.3
Joomla Joomla\!=1.7.4
Joomla Joomla\!=1.7.5
Joomla Joomla\!=2.5.0
Joomla Joomla\!=2.5.1
Joomla Joomla\!=2.5.2
Joomla Joomla\!=2.5.3
Joomla Joomla\!=2.5.4
Joomla Joomla\!=2.5.5
Joomla Joomla\!=2.5.6
Joomla Joomla\!=2.5.7
Joomla Joomla\!=2.5.8
Joomla Joomla\!=2.5.9
Joomla Joomla\!=2.5.10
Joomla Joomla\!=2.5.11
Joomla Joomla\!=2.5.12
Joomla Joomla\!=2.5.13
Joomla Joomla\!=2.5.14
Joomla Joomla\!=2.5.15
Joomla Joomla\!=2.5.16
Joomla Joomla\!=2.5.17
Joomla Joomla\!=2.5.18
Joomla Joomla\!=2.5.19
Joomla Joomla\!=2.5.20
Joomla Joomla\!=2.5.21
Joomla Joomla\!=2.5.22
Joomla Joomla\!=2.5.23
Joomla Joomla\!=2.5.24
Joomla Joomla\!=2.5.25
Joomla Joomla\!=2.5.26
Joomla Joomla\!=2.5.27
Joomla Joomla\!=2.5.28
Joomla Joomla\!=3.0.0
Joomla Joomla\!=3.0.1
Joomla Joomla\!=3.0.2
Joomla Joomla\!=3.0.3
Joomla Joomla\!=3.0.4
Joomla Joomla\!=3.1.0
Joomla Joomla\!=3.1.1
Joomla Joomla\!=3.1.2
Joomla Joomla\!=3.1.3
Joomla Joomla\!=3.1.4
Joomla Joomla\!=3.1.5
Joomla Joomla\!=3.1.6
Joomla Joomla\!=3.2.0
Joomla Joomla\!=3.2.1
Joomla Joomla\!=3.2.2
Joomla Joomla\!=3.2.3
Joomla Joomla\!=3.2.4
Joomla Joomla\!=3.3.0
Joomla Joomla\!=3.3.1
Joomla Joomla\!=3.3.2
Joomla Joomla\!=3.3.3
Joomla Joomla\!=3.3.4
Joomla Joomla\!=3.3.5
Joomla Joomla\!=3.4.0
Joomla Joomla\!=3.4.0-alpha
Joomla Joomla\!=3.4.0-beta1
Joomla Joomla\!=3.4.0-beta2
Joomla Joomla\!=3.4.0-beta3
Joomla Joomla\!=3.4.0-rc1
Joomla Joomla\!=3.4.1
Joomla Joomla\!=3.4.1-rc1
Joomla Joomla\!=3.4.1-rc2
Joomla Joomla\!=3.4.2-rc1
Joomla Joomla\!=3.4.3
Joomla Joomla\!=3.4.4
Joomla Joomla\!=3.4.5
Joomla Joomla\!=3.4.6
Joomla Joomla\!=3.4.7
Joomla Joomla\!=3.4.8
Joomla Joomla\!=3.4.8-rc
Joomla Joomla\!=3.5.0
Joomla Joomla\!=3.5.0-beta
Joomla Joomla\!=3.5.0-beta2
Joomla Joomla\!=3.5.0-beta3
Joomla Joomla\!=3.5.0-beta4
Joomla Joomla\!=3.5.0-beta5
Joomla Joomla\!=3.5.0-rc
Joomla Joomla\!=3.5.0-rc2
Joomla Joomla\!=3.5.0-rc3
Joomla Joomla\!=3.5.0-rc4
Joomla Joomla\!=3.5.1
Joomla Joomla\!=3.5.1-rc
Joomla Joomla\!=3.6.0
Joomla Joomla\!=3.6.0-alpha
Joomla Joomla\!=3.6.0-beta1
Joomla Joomla\!=3.6.0-beta2
Joomla Joomla\!=3.6.0-rc
Joomla Joomla\!=3.6.0-rc2
Joomla Joomla\!=3.6.1
Joomla Joomla\!=3.6.1-rc1
Joomla Joomla\!=3.6.1-rc2
Joomla Joomla\!=3.6.2
Joomla Joomla\!=3.6.3
Joomla Joomla\!=3.6.3-rc1
Joomla Joomla\!=3.6.3-rc2
Joomla Joomla\!=3.6.3-rc3
Joomla Joomla\!=3.6.4
Joomla Joomla\!=3.6.5
Joomla Joomla\!=3.7.0
Joomla Joomla\!=3.7.1
Joomla Joomla\!=3.7.2
Event History
Jul 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9934?
CVE-2017-9934 is classified as a high severity vulnerability due to its potential to allow unauthorized actions through cross-site scripting (XSS).
2
How do I fix CVE-2017-9934?
To fix CVE-2017-9934, you should update Joomla! CMS to version 3.7.3 or later where this vulnerability has been addressed.
3
What types of vulnerabilities does CVE-2017-9934 include?
CVE-2017-9934 includes risks related to missing CSRF token checks and improper input validation leading to XSS attacks.
4
Which Joomla! versions are affected by CVE-2017-9934?
CVE-2017-9934 affects Joomla! versions from 1.7.3 through 3.7.2.
5
Can CVE-2017-9934 be exploited remotely?
Yes, CVE-2017-9934 can be exploited remotely, allowing attackers to inject malicious scripts into vulnerable web pages.