CVE-2012-0820

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-09-06 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0822.

Affected products

Joomla!: 1.6-alpha, 1.6-alpha2, 1.6-beta1, 1.6-beta10, 1.6-beta11, 1.6-beta12 (+22)

References

http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability
http://secunia.com/advisories/47753
http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html
http://www.joomla.org/announcements/release-news/5405-joomla-174-released.html
http://www.openwall.com/lists/oss-security/2012/01/25/1
http://www.openwall.com/lists/oss-security/2012/01/26/2
http://www.openwall.com/lists/oss-security/2012/01/26/4
http://www.openwall.com/lists/oss-security/2012/01/30/1
http://www.osvdb.org/78515
http://developer.joomla.org/security/news/383-20120102-core-xss-vulnerability
http://secunia.com/advisories/47753
http://www.joomla.org/announcements/release-news/5403-joomla-250-released.html

Get alerted when CVE-2012-0820 or the next vulnerability affects your stack