Unrated severityNVD Advisory· Published Oct 18, 2007· Updated Jun 16, 2026

CVE-2007-5577

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/Joomla!2 versions
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: <1.0.13
- (no CPE)range: <1.0.13

Patches

Vulnerability mechanics

References

joomlacode.org/gf/project/joomla/tracker/nvdPatchVendor Advisory
secunia.com/advisories/25804nvdPatchVendor Advisory
www.joomla.org/content/view/3670/78/nvdRelease NotesVendor Advisory
www.joomla.org/content/view/3677/1/nvdVendor Advisory
www.securityfocus.com/bid/24663nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/35119nvdThird Party AdvisoryVDB Entry
osvdb.org/37173nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000