CVE-2012-5455

Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "typographical error."

• CWE-79

• http://developer.joomla.org/security/news/541-20121001-core-xss-vulnerabilityVendor Advisory
• http://osvdb.org/86134
• http://secunia.com/advisories/50879Vendor Advisory
• http://www.joomla.org/announcements/release-news/5468-joomla-3-0-1-released.htmlVendor Advisory
• http://www.securityfocus.com/bid/55858
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79171
• http://developer.joomla.org/security/news/541-20121001-core-xss-vulnerabilityVendor Advisory
• http://osvdb.org/86134
• http://secunia.com/advisories/50879Vendor Advisory
• http://www.joomla.org/announcements/release-news/5468-joomla-3-0-1-released.htmlVendor Advisory
• http://www.securityfocus.com/bid/55858
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79171

Published

Oct 22, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5445The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Ph…
• CVE-2012-5450Cross-site request forgery (CSRF) vulnerability in lib/filem…
• CVE-2012-5451Multiple stack-based buffer overflows in HttpUtils.dll in TV…
• CVE-2012-5452Multiple cross-site scripting (XSS) vulnerabilities in Subri…
• CVE-2012-5453SQL injection vulnerability in user/index_inline_editor_subm…
• CVE-2012-5454user/index_inline_editor_submit.php in ATutor AContent 1.2-1…
• CVE-2012-5456The Zoner AntiVirus Free application for Android does not ve…
• CVE-2012-5458VMware Workstation 8.x before 8.0.5 and VMware Player 4.x be…
• CVE-2012-5459Untrusted search path vulnerability in VMware Workstation 8.…
• CVE-2012-5460Cross-site scripting (XSS) vulnerability in the help page in…
• CVE-2012-5468Heap-based buffer overflow in iconvert.c in the bogolexer co…
• CVE-2012-5469The Portable phpMyAdmin plugin before 1.3.1 for WordPress al…