Vulnerability Details CVE-2011-2892
Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.4%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2011-2892
-
cpe:2.3:a:joomla:joomla!:1.6
-
cpe:2.3:a:joomla:joomla!:1.6.0
-
cpe:2.3:a:joomla:joomla!:1.6.1