Threats tagged 'ghsa-q7p6-hg4g-4wgq'

An unauthenticated stored cross-site scripting (XSS) vulnerability exists in the DJ-HelpfulArticles Joomla extension versions prior to 1.3.0. The vulnerability arises because the 'was this article helpful' voting widget accepts a client-supplied IP field via AJAX handlers without proper validation or output escaping. This field is stored and later rendered in the administrator backend without HTML escaping, allowing injection of malicious scripts. The lack of CSRF protection, rate limiting, and reliance on an attacker-controlled field for vote de-duplication exacerbates the risk.