CVE-2017-9934
MEDIUM 6.1EPSS 2.2%
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.
- CVSS v3.0 NVD
- 6.1 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 2.21% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2017-07-17
- Updated
- 2024-08-05
Proof-of-concept exploits (1)
- xyringe/CVE-2017-99340★ · 2018-07-04
Security advisories
- https://developer.joomla.org/security-centre/697-20170602-core-xss-vulnerability
- http://www.securityfocus.com/bid/99451
- http://www.securitytracker.com/id/1038817