Cross-Site Scripting Vulnerability in J-ClassifiedsManager for Joomla!
CVE-2015-1478
Currently unrated
Key Information:
- Vendor
Cmsjunkie
- Status
- Vendor
- CVE Published:
- 4 February 2015
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2015-1478?
A Cross-Site Scripting (XSS) vulnerability exists in the J-ClassifiedsManager component for Joomla!. This flaw allows remote attackers to inject arbitrary web scripts or HTML through the 'view' parameter in the /classifieds URL. If exploited, the vulnerability could lead to unauthorized actions being executed in the context of the targeted user's session, potentially compromising sensitive information or manipulating web content.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.