4.3
CVSSv2

CVE-2010-0374

Published: 21/01/2010 Updated: 17/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote malicious users to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

codingfish com_marketplace 1.2

Exploits

source: wwwsecurityfocuscom/bid/37819/info The Joomla! 'com_marketplace' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site Thi ...