CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
What the vulnerability does
Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enabling session hijacking or credential theft.
Explanation of Vulnerability in Simple Terms
A cross-site scripting (XSS) vulnerability in Joomla JLex Review allows attackers to inject malicious scripts that execute in users' browsers. The vulnerability requires user interaction—a victim must visit a crafted page or click a malicious link. Successful exploitation can deface content or steal session data from site visitors.
What an attacker can do
Inject malicious JavaScript that runs in visitors' browsers when they view affected pages.
Potential impact on your site
Site visitors may see defaced content, have sessions hijacked, or be redirected to malicious sites.
Conditions required to exploit
Network access and user interaction required; victim must visit a page containing the attacker's payload.
Key dates
External resources
Related vulnerabilities
