[20190102] – Core – Stored XSS in com_contact

Jan15
by Ike on January 15, 2019 at 2:45 pm
Posted In: CMS, Joomla, security, Security Centre
  • Project: Joomla!
  • SubProject: CMS
  • Impact: Low
  • Severity: Low
  • Versions: 2.5.0 through 3.9.1
  • Exploit type: XSS
  • Reported Date: 2018-December-04
  • Fixed Date: 2019-January-15
  • CVE Number: CVE-2019-6261

Description

Inadequate escaping in com_contact leads to a stored XSS vulnerability

Affected Installs

Joomla! CMS versions 2.5.0 through 3.9.1

Solution

Upgrade to version 3.9.2

Contact

The JSST at the Joomla! Security Centre.

Reported By: Antonin Steinhauser

└ Tags:
 Comment 

[20190101] – Core – Stored XSS in mod_banners

Jan15
by Ike on January 15, 2019 at 2:45 pm
Posted In: CMS, Joomla, security, Security Centre
  • Project: Joomla!
  • SubProject: CMS
  • Impact: Low
  • Severity: Low
  • Versions: 2.5.0 through 3.9.1
  • Exploit type: XSS
  • Reported Date: 2018-December-01
  • Fixed Date: 2019-January-15
  • CVE Number: CVE-2019-6264

Description

Inadequate escaping in mod_banners leads to a stored XSS vulnerability.

Affected Installs

Joomla! CMS versions 2.5.0 through 3.9.1

Solution

Upgrade to version 3.9.2

Contact

The JSST at the Joomla! Security Centre.

Reported By: Antonin Steinhauser

└ Tags:
 Comment 

Joomla 3.9.2 Release

Jan15
by Ike on January 15, 2019 at 2:45 pm
Posted In: CMS, Community, Joomla, Joomla! Official News, Releases
Joomla 3.9.2

Joomla 3.9.2 is now available. This is a security release for the 3.x series of Joomla which addresses 4 security vulnerabilities and contains over 50 bug fixes and improvements.

└ Tags:
 Comment 

WordPress 5.0 and Gutenberg – What you should expect

Jan15
by Ike on January 15, 2019 at 7:30 am
Posted In: Business and industry, Featured, Gutenberg, Plesk, Plesk news and announcements, Releases, WordPress 5

The post WordPress 5.0 and Gutenberg – What you should expect appeared first on Plesk.

└ Tags: , , , ,
 Comment 

Fedora 28: nbdkit Security Update

Jan15
by Ike on January 15, 2019 at 6:36 am
Posted In: Other

(Jan 15) New upstream version 1.4.4. Fix low priority security issue with TLS: https://www.redhat.com/archives/libguestfs/2018-December/msg00047.html

 Comment 

50 queries. 8.75 mb Memory usage. 0.280 seconds.