Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php.
Affected Platforms
Facileforms FacileformsJoomla Joomla\!Mambo-Foundation Mambo