{"action":"Upgrade joomla/joomla-cms to 1.6.4 or later.","affected":[{"fixed":"1.6.4","introduced":"0"}],"component":"joomla/joomla-cms","cve_ids":["CVE-2011-2509"],"ecosystem":"Packagist","epss":0.01089,"exploited":false,"fixed_versions":["1.6.4"],"ghsa_id":"GHSA-vcq7-x4wr-w2mj","id":"tcs_01M5KF933AXYWB06FF30TR496H","modified_at":"2025-04-12T02:42:07.438830Z","published_at":"2022-05-14T03:08:10Z","references":["https://osv.dev/vulnerability/GHSA-vcq7-x4wr-w2mj","https://nvd.nist.gov/vuln/detail/CVE-2011-2509","http://developer.joomla.org/security/news/352-20110604-xss-vulnerability.html","http://www.openwall.com/lists/oss-security/2011/06/28/4","http://www.openwall.com/lists/oss-security/2011/06/29/12","http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.6.3%5D_cross_site_scripting%28XSS%29"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vcq7-x4wr-w2mj","url":"https://osv.dev/vulnerability/GHSA-vcq7-x4wr-w2mj"}],"summary":"Joomla! vulnerable to Cross-site Scripting"}