Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Ryan Demmer Component: Joomla Content Editor Clear all filters
TI-2012-02516 CVE-2012-2902 · GHSA-2cqq-3cpj-9xcq

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the…

Priority LOW 29

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor (JCE) component before 2.1 for Joomla!, when chunking is set to greater than zero, allows remote authors to execut…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01007 Published 2012-05-21 No fix listed
TI-2012-02515 CVE-2012-2901 · GHSA-j56q-2899-9w2x

Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the search parameter to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2012-05-21 No fix listed CWE-79