Application: Joomla!
Affected Version: prior version of 1.5 RC4
Vendor’s URL: http://www.joomla.org/
Bug Type: Cross Site Scripting
Risk Level: Medium
Solution:
Restrict access to trusted users only and edit the source code to ensure that input is properly sanitized. Do not browse other websites while being logged in into Joomla!.
Some of the vulnerabilities are fixed in Joomla! 1.5 RC4.
0 Responses to “Joomla! XSRF and Script Insertion”