What’s Vulnerable › Vulnerabilities

CVE-2011-2892

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-07-27 · updated 2026-06-16
• Weakness: CWE-20

Description

Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Affected products

• Joomla!: 1.6-alpha, 1.6-alpha2, 1.6-beta1, 1.6-beta10, 1.6-beta11, 1.6-beta12 (+14)

References

• http://bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html
• http://developer.joomla.org/security/news/347-20110409-core-clickjacking.html
• http://bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html
• http://developer.joomla.org/security/news/347-20110409-core-clickjacking.html

Get alerted when CVE-2011-2892 or the next vulnerability affects your stack