CVE-2010-4405

Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
anything-digitalsh404sef
𝑥
≤ 2.1.7.761
anything-digitalsh404sef
1.5.2.255
anything-digitalsh404sef
1.5.3.296
anything-digitalsh404sef
1.5.4.302
anything-digitalsh404sef
1.5.5.388
anything-digitalsh404sef
1.5.6.398
anything-digitalsh404sef
1.5.7.407
anything-digitalsh404sef
1.5.8.432
anything-digitalsh404sef
1.5.9.434
anything-digitalsh404sef
1.5.10.446
anything-digitalsh404sef
1.5.11.459
anything-digitalsh404sef
1.5.12.464
anything-digitalsh404sef
2.0.0:rc522
anything-digitalsh404sef
2.0.1.531
anything-digitalsh404sef
2.0.2.542
anything-digitalsh404sef
2.0.3.545
anything-digitalsh404sef
2.1.0.641
anything-digitalsh404sef
2.1.1.644
anything-digitalsh404sef
2.1.2.649
anything-digitalsh404sef
2.1.3.680
anything-digitalsh404sef
2.1.4.734
anything-digitalsh404sef
2.1.5.746
anything-digitalsh404sef
2.1.6.749
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/
http://secunia.com/advisories/42430
http://twitter.com/jeffchannell/status/8603529560195072
http://www.securityfocus.com/bid/45135
http://dev.anything-digital.com/Forum/Announcements/9100-Urgent-sh404SEF-security-release-Joomla-1.5/
http://secunia.com/advisories/42430
http://twitter.com/jeffchannell/status/8603529560195072
http://www.securityfocus.com/bid/45135