← Database

CVE-2010-2514

MEDIUM CVSS: 4.3 Published: 2010-06-28 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the JFaq (com_jfaq) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the question parameter in an add2 action to index.php.

Affected Platforms

Dacian Strain Com JfaqJoomla Joomla\!

Weakness Type

CWE-79

References