Low severityNVD Advisory· Published Nov 23, 2011· Updated Jun 16, 2026
CVE-2011-4332
CVE-2011-4332
Description
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
joomla/joomla-cmsPackagist | < 1.6.4 | 1.6.4 |
Affected products
25cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: <=1.6.3
- cpe:2.3:a:joomla:joomla\!:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:alpha:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:alpha2:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta1:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta10:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta11:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta12:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta13:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta14:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta15:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta2:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta3:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta4:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta5:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta6:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta7:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta8:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:beta9:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:1.6:rc1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-hq9x-8m8j-5hmhghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2011-4332ghsaADVISORY
- developer.joomla.org/security/news/349-20110601-xss-vulnerabilities.htmlnvdWEB
- seclists.org/fulldisclosure/2011/Nov/142nvdWEB
- www.openwall.com/lists/oss-security/2011/11/21/29nvdWEB
- web.archive.org/web/20111115073609/http://www.mavitunasecurity.com/xss-vulnerability-in-joomla-163ghsaWEB
- www.mavitunasecurity.com/xss-vulnerability-in-joomla-163/nvd
News mentions
0No linked articles in our index yet.