Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities :

 - A cross-site scripting (XSS) vulnerability exists due to improper validation of user-supplied input with multibyte characters. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user's browser session. Note that this vulnerability affects versions 1.5.0 through 3.6.5. (CVE-2017-7985)

 - An information disclosure vulnerability exists due to improper handling of cache invalidation. An unauthenticated, remote attacker can exploit this to disclose sensitive form content. (CVE-2017-9933)

 - A cross-site scripting (XSS) vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user's browser session. (CVE-2017-9934)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Joomla! installation running on the remote web server is 1.7.3 or later but prior to 3.7.3. It is, therefore, affected by the following vulnerabilities :

  - A cross-site scripting (XSS) vulnerability exists due to     improper validation of user-supplied input with     multibyte characters. An unauthenticated, remote     attacker can exploit this, via a specially crafted     request, to execute arbitrary script code in a user's     browser session. Note that this vulnerability affects     versions 1.5.0 through 3.6.5. (CVE-2017-7985)

  - An information disclosure vulnerability exists due to     improper handling of cache invalidation. An     unauthenticated, remote attacker can exploit this to     disclose sensitive form content. (CVE-2017-9933)

  - A cross-site scripting (XSS) vulnerability exists due to     improper validation of user-supplied input before     returning it to users. An unauthenticated, remote     attacker can exploit this, via a specially crafted     request, to execute arbitrary script code in a user's     browser session. (CVE-2017-9934)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
98437	Joomla! 1.5.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98436	Joomla! 1.6.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98435	Joomla! 1.7.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98434	Joomla! 2.5.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98433	Joomla! 3.0.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98432	Joomla! 3.1.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98431	Joomla! 3.2.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98430	Joomla! 3.3.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98429	Joomla! 3.4.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98428	Joomla! 3.5.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98427	Joomla! 3.6.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
98426	Joomla! 3.7.x < 3.7.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
101300	Joomla! 1.7.3 < 3.7.3 Multiple Vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2017-9934

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high