Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) GET and other variables and (2) SEF.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Joomla | Joomla | 1.0 (including) | 1.0 (including) |
Joomla | Joomla | 1.0.1 (including) | 1.0.1 (including) |
Joomla | Joomla | 1.0.2 (including) | 1.0.2 (including) |
Joomla | Joomla | 1.0.3 (including) | 1.0.3 (including) |