CVE-2017-7987

Published: Apr 25, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component.

Affected (57)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

57 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 3.2.0
Joomla Joomla!	Version 3.2.1
Joomla Joomla!	Version 3.2.2
Joomla Joomla!	Version 3.2.3
Joomla Joomla!	Version 3.2.4
Joomla Joomla!	Version 3.3.0
Joomla Joomla!	Version 3.3.1
Joomla Joomla!	Version 3.3.2
Joomla Joomla!	Version 3.3.3
Joomla Joomla!	Version 3.3.4
Joomla Joomla!	Version 3.3.5
Joomla Joomla!	Version 3.4.0
Joomla Joomla!	Version 3.4.0 alpha
Joomla Joomla!	Version 3.4.0 beta1
Joomla Joomla!	Version 3.4.0 beta2
Joomla Joomla!	Version 3.4.0 beta3
Joomla Joomla!	Version 3.4.0 rc1
Joomla Joomla!	Version 3.4.1
Joomla Joomla!	Version 3.4.1 rc1
Joomla Joomla!	Version 3.4.1 rc2
Joomla Joomla!	Version 3.4.2
Joomla Joomla!	Version 3.4.2 rc1
Joomla Joomla!	Version 3.4.3
Joomla Joomla!	Version 3.4.4
Joomla Joomla!	Version 3.4.5
Joomla Joomla!	Version 3.4.6
Joomla Joomla!	Version 3.4.7
Joomla Joomla!	Version 3.4.8
Joomla Joomla!	Version 3.4.8 rc
Joomla Joomla!	Version 3.5.0
Joomla Joomla!	Version 3.5.0 beta2
Joomla Joomla!	Version 3.5.0 beta3
Joomla Joomla!	Version 3.5.0 beta4
Joomla Joomla!	Version 3.5.0 beta5
Joomla Joomla!	Version 3.5.0 beta
Joomla Joomla!	Version 3.5.0 rc2
Joomla Joomla!	Version 3.5.0 rc3
Joomla Joomla!	Version 3.5.0 rc4
Joomla Joomla!	Version 3.5.0 rc
Joomla Joomla!	Version 3.5.1
Joomla Joomla!	Version 3.5.1 rc
Joomla Joomla!	Version 3.6.0
Joomla Joomla!	Version 3.6.0 alpha
Joomla Joomla!	Version 3.6.0 beta1
Joomla Joomla!	Version 3.6.0 beta2
Joomla Joomla!	Version 3.6.0 rc2
Joomla Joomla!	Version 3.6.0 rc
Joomla Joomla!	Version 3.6.1
Joomla Joomla!	Version 3.6.1 rc1
Joomla Joomla!	Version 3.6.1 rc2
Joomla Joomla!	Version 3.6.2
Joomla Joomla!	Version 3.6.3
Joomla Joomla!	Version 3.6.3 rc1
Joomla Joomla!	Version 3.6.3 rc2
Joomla Joomla!	Version 3.6.3 rc3
Joomla Joomla!	Version 3.6.4
Joomla Joomla!	Version 3.6.5