Unrated severityNVD Advisory· Published Oct 31, 2012· Updated Jun 16, 2026
CVE-2012-4532
CVE-2012-4532
Description
Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:joomla:joomla\!:2.5.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:joomla:joomla\!:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:joomla:joomla\!:2.5.6:*:*:*:*:*:*:*
- (no CPE)range: >= 2.5.0, < 2.5.7
Patches
Vulnerability mechanics
References
7- www.darksecurity.de/advisories/2012/SSCHADV2012-014.txtnvdExploit
- developer.joomla.org/security/news/540-20120902-core-xss-vulnerabilitynvdVendor Advisory
- secunia.com/advisories/49678nvdVendor Advisory
- www.joomla.org/announcements/release-news/5463-joomla-2-5-7-released.htmlnvdVendor Advisory
- www.openwall.com/lists/oss-security/2012/10/07/3nvd
- www.openwall.com/lists/oss-security/2012/10/19/4nvd
- www.osvdb.org/83490nvd
News mentions
0No linked articles in our index yet.