What’s Vulnerable › Vulnerabilities
CVE-2017-7985
- Severity: medium (CVSS 6.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-04-25 · updated 2026-06-17
- Weakness: CWE-79
Description
In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters leads to XSS vulnerabilities in various components.
Affected products
- Joomla!: from 1.5.0 through 3.6.5
References
- http://www.securityfocus.com/bid/98020
- http://www.securitytracker.com/id/1038817
- https://developer.joomla.org/security-centre/685-20170403-core-xss-vulnerability
- https://fortiguard.com/zeroday/FG-VD-17-107
- https://fortiguard.com/zeroday/FG-VD-17-108
- https://fortiguard.com/zeroday/FG-VD-17-109
- http://www.securityfocus.com/bid/98020
- http://www.securitytracker.com/id/1038817
- https://developer.joomla.org/security-centre/685-20170403-core-xss-vulnerability
- https://fortiguard.com/zeroday/FG-VD-17-107
- https://fortiguard.com/zeroday/FG-VD-17-108
- https://fortiguard.com/zeroday/FG-VD-17-109
Get alerted when CVE-2017-7985 or the next vulnerability affects your stack