← Database

CVE-2009-1940

MEDIUM CVSS: 4.3 Published: 2009-06-05 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Platforms

Joomla Joomla

Weakness Type

CWE-79

References