Unrated severityNVD Advisory· Published Oct 31, 2012· Updated Jun 16, 2026
CVE-2012-4531
CVE-2012-4531
Description
Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:joomla:joomla\!:2.5.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:joomla:joomla\!:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.6:*:*:*:*:*:*:*
- (no CPE)range: <2.5.7
Patches
Vulnerability mechanics
References
6- developer.joomla.org/security/news/539-20120901-core-xss-vulnerabilitynvdVendor Advisory
- secunia.com/advisories/49678nvdVendor Advisory
- www.joomla.org/announcements/release-news/5463-joomla-2-5-7-released.htmlnvd
- www.openwall.com/lists/oss-security/2012/10/07/3nvd
- www.openwall.com/lists/oss-security/2012/10/19/4nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/79725nvd
News mentions
0No linked articles in our index yet.