VulnerabilityModified

CVE-2007-5577

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple…

MEDIUM 4.3EPSS 2.15%

Does this matter?

Lower severity and a low EPSS score (2.15%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 2.15% probability · 81th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: joomla/joomla\!
Source: cve@mitre.org

References

http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654Patch, Vendor Advisory
http://osvdb.org/37173Broken Link
http://secunia.com/advisories/25804Patch, Vendor Advisory
http://www.joomla.org/content/view/3670/78/Release Notes, Vendor Advisory
http://www.joomla.org/content/view/3677/1/Vendor Advisory
http://www.securityfocus.com/bid/24663Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35119Third Party Advisory, VDB Entry
http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654Patch, Vendor Advisory
http://osvdb.org/37173Broken Link
http://secunia.com/advisories/25804Patch, Vendor Advisory
http://www.joomla.org/content/view/3670/78/Release Notes, Vendor Advisory
http://www.joomla.org/content/view/3677/1/Vendor Advisory
http://www.securityfocus.com/bid/24663Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35119Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.