CVE-2023-40657
Assigner: Joomla
Published: 2023-12-14T08:51:56.186Z
State: PUBLISHED
affected: collectionURL: https://extensions.joomla.org/extension/joomdoc/
defaultStatus: unaffected
packageName: com_joomdoc
product: Joomdoc component for Joomla
vendor: artio.net
versions: status: affected
version: 1.0.0-4.0.5
credits: type: finder
value: Sai Krishna P and Siva Pothuluru S
descriptions: supportingMedia: base64: no
type: text/html
value: A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla.
value: A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla.
impacts: capecId: CAPEC-18
descriptions: value: CAPEC-18 XSS Targeting Non-Script Elements
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
source: discovery: UNKNOWN
title: Extension - artio.net - Reflected XSS in Joomdoc component for Joomla 1.0.0-4.0.5
x_generator: engine: Vulnogram 0.1.0-dev