CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.
Explanation of Vulnerability in Simple Terms
RSDirectory! for Joomla contains a cross-site scripting (XSS) vulnerability in versions up to 2.2.8. An attacker with high-level privileges can inject malicious scripts that execute in the browsers of other users viewing the component. The vulnerability requires administrative or elevated access to exploit.
What an attacker can do
Inject malicious scripts that run in other users' browsers when they view the component.
Potential impact on your site
A compromised admin account could inject scripts affecting other administrators or users, potentially stealing session tokens or modifying site content.
Conditions required to exploit
Attacker must have high-level privileges (admin or manager role) in the Joomla installation.
Key dates
External resources
Related vulnerabilities
