CVE-2023-40656

CVE-2023-40656: Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01

Vendor Plasma-Web.ru

Product Quickform component for Joomla

Weakness CWE-79 · XSS

Published December 14, 2023

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A reflected XSS vulnerability was discovered in the Quickform component for Joomla.

Key dates

02Disclosure timeline

December 14, 2023 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-40656 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html AskarLabs — CWE-79 write-up Cross-Site Scripting

Related vulnerabilities

04Related CVE

CVE-2026-18400 Slider, Gallery, and Carousel by MetaSlider <= 3.111.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'delay' Post Meta Setting CVE-2026-16143 VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting CVE-2026-65560 WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability CVE-2026-17505 TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting CVE-2025-15028 FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scripting