{"id":"CVE-2013-5583","aliases":[],"url":"https://o3.security/vulnerability/CVE-2013-5583","summary":"Joomla! Cross-site Scripting vulnerability","details":"Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.","published":"2022-05-17T03:12:54Z","modified":"2025-04-12T04:12:08.799894Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"joomla/joomla-cms","fixedVersion":"3.1.6"}],"fix":{"url":"https://github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f","label":"joomla/joomla-cms@c00c033"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5583"},{"type":"WEB","url":"https://github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f"},{"type":"PACKAGE","url":"https://github.com/joomla/joomla-cms"},{"type":"WEB","url":"https://web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability"},{"type":"WEB","url":"https://web.archive.org/web/20130810103125/http://www.securityfocus.com/bid/61600"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-04-12T04:12:08.799894Z"}}