CINXE.COM

<!DOCTYPE html> <html lang="en-gb" dir="ltr"> <head><script type="text/javascript">liveSite = "";</script> <meta charset="utf-8" /> <base href="https://extensions.joomla.org/vulnerable-extensions/about/" /> <meta name="author" content="Vulnerable Extensions List" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="blue" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:site" content="@joomla" /> <meta name="twitter:description" content="The Platform Millions of Websites Are Built On" /> <meta name="twitter:image" content="https://extensionscdn.joomla.org/images/social-images/jed-twitter-card.png" /> <meta name="twitter:title" content="Joomla.org" /> <meta name="referrer" content="unsafe-url" /> <meta property="og:site_name" content="Joomla! Extensions Directory™" /> <meta property="og:image" content="https://extensionscdn.joomla.org/images/social-images/jed-og.jpg" /> <meta name="description" content="Find extensions for your Joomla site in the Joomla Extensions Directory, the official directory for Joomla components, modules and plugins." /> <meta name="generator" content="Joomla! - Open Source Content Management" /> <title>About</title> <link href="/templates/joomla/images/apple-touch-icon-180x180.png" rel="apple-touch-icon" sizes="180x180" /> <link href="/templates/joomla/images/apple-touch-icon-152x152.png" rel="apple-touch-icon" sizes="152x152" /> <link href="/templates/joomla/images/apple-touch-icon-144x144.png" rel="apple-touch-icon" sizes="144x144" /> <link href="/templates/joomla/images/apple-touch-icon-120x120.png" rel="apple-touch-icon" sizes="120x120" /> <link href="/templates/joomla/images/apple-touch-icon-114x114.png" rel="apple-touch-icon" sizes="114x114" /> <link href="/templates/joomla/images/apple-touch-icon-76x76.png" rel="apple-touch-icon" sizes="76x76" /> <link href="/templates/joomla/images/apple-touch-icon-72x72.png" rel="apple-touch-icon" sizes="72x72" /> <link href="/templates/joomla/images/apple-touch-icon-57x57.png" rel="apple-touch-icon" sizes="57x57" /> <link href="/templates/joomla/images/apple-touch-icon.png" rel="apple-touch-icon" /> <link href="/templates/joomla/favicon.ico" rel="shortcut icon" type="image/vnd.microsoft.icon" /> <link href="/media/com_jce/site/css/content.min.css?badb4208be409b1335b815dde676300e" rel="stylesheet" /> <link href="//netdna.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" /> <link href="https://cdn.joomla.org/template/css/template_3.0.0.min.css" rel="stylesheet" /> <link href="/templates/joomla/css/custom.min.css?a61c8c853f6950e4ba8f46172465ab2f" rel="stylesheet" /> <link href="https://fonts.googleapis.com/css?family=Open+Sans" rel="stylesheet" /> <style> h1, h2, h3, h4, h5, h6 { font-family: 'Open Sans', sans-serif; } </style> <script type="application/json" class="joomla-script-options new">{"csrf.token":"b37996dd76227dd0a94ac1dab17377f8","system.paths":{"root":"","base":""}}</script> <script src="/media/jui/js/jquery.min.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/media/jui/js/jquery-noconflict.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/media/jui/js/jquery-migrate.min.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/media/jui/js/bootstrap.min.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/media/system/js/caption.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/media/system/js/core.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/templates/joomla/js/template.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/templates/joomla/js/blockadblock.js?a61c8c853f6950e4ba8f46172465ab2f"></script> <script src="/templates/joomla/js/js.cookie.js?a61c8c853f6950e4ba8f46172465ab2f"></script>  <script src="https://cdn.jsdelivr.net/algoliasearch/3/algoliasearch.min.js?a61c8c853f6950e4ba8f46172465ab2f" defer></script> <script src="https://cdn.jsdelivr.net/autocomplete.js/0/autocomplete.min.js?a61c8c853f6950e4ba8f46172465ab2f" defer></script> <script src="/media/com_jed/js/autocomplete.min.js?a61c8c853f6950e4ba8f46172465ab2f" defer></script> <script> jQuery(window).on('load', function() { new JCaption('img.caption'); }); var jAutoComplete = window.jAutoComplete || []; jAutoComplete.push({"algoliaApplicationId":"BLPSS1JDLM","algoliaSearchOnlyApiKey":"45457336014964a3858de02be398ea70","algoliaIndexName":"jed_live","hits":7,"name":"core_title","category":"core_catid","tags":"tags","url":"url"}); </script> </head> <body class="site com_content view-article layout-default task-display itemid-1063">  <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-MH6RGF" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript> <script>(function(w, d, s, l, i) { w[l] = w[l] || []; w[l].push({'gtm.start': new Date().getTime(), event: 'gtm.js'}); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-MH6RGF');</script>   <nav class="navigation" role="navigation"> <div id="mega-menu" class="navbar navbar-inverse navbar-fixed-top"> <div class="navbar-inner"> <div class="container"> <a class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </a> <div class="nav-collapse collapse"> <ul id="nav-joomla" class="nav"> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#"> <span dir="ltr"><span aria-hidden="true" class="icon-joomla"></span> Joomla!<sup>®</sup></span> <span class="caret"></span> </a> <ul class="dropdown-menu"> <li class="nav-header"><span>About us</span></li> <li> <a href="https://www.joomla.org"> <span aria-hidden="true" class="icon-joomla"></span> Joomla Home </a> </li> <li><a href="https://www.joomla.org/about-joomla.html">What is Joomla?</a></li> <li><a href="https://www.joomla.org/core-features.html">Benefits & Features</a></li> <li><a href="https://www.joomla.org/about-joomla/the-project.html">Project & Leadership</a></li> <li><a href="https://tm.joomla.org">Trademark & Licensing</a></li> <li><a href="https://joomlafoundation.org">The Joomla Foundation</a></li> <li class="divider"></li> <li class="nav-header"><span>Support us</span></li> <li><a href="https://www.joomla.org/contribute-to-joomla.html">Contribute</a></li> <li><a href="https://www.joomla.org/sponsor.html">Sponsor</a></li> <li><a href="https://www.joomla.org/about-joomla/partners.html">Partner</a></li> <li><a href="https://shop.joomla.org">Shop</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Download & Extend <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://downloads.joomla.org">Downloads</a></li> <li><a href="https://extensions.joomla.org">Extensions</a></li> <li><a href="https://downloads.joomla.org/language-packs">Languages</a></li> <li><a href="https://launch.joomla.org">Get a free site</a></li> <li><a href="https://domains.joomla.org">Get a domain</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Discover & Learn <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://docs.joomla.org">Documentation</a></li> <li><a href="https://community.joomla.org/joomla-training.html">Training</a></li> <li><a href="https://certification.joomla.org">Certification</a></li> <li><a href="https://showcase.joomla.org">Site Showcase</a></li> <li><a href="https://www.joomla.org/announcements.html">Announcements</a></li> <li><a href="https://community.joomla.org/blogs.html">Blogs</a></li> <li><a href="https://magazine.joomla.org">Magazine</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Community & Support <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://community.joomla.org">Community Portal</a></li> <li><a href="https://community.joomla.org/events.html">Events</a></li> <li><a href="https://community.joomla.org/user-groups.html">User Groups</a></li> <li><a href="https://forum.joomla.org">Forum</a></li> <li><a href="https://community.joomla.org/service-providers-directory.html">Service Providers Directory</a></li> <li><a href="https://volunteers.joomla.org">Volunteers Portal</a></li> <li><a href="https://extensions.joomla.org/vulnerable-extensions/vulnerable/">Vulnerable Extensions List</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Developer Resources <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://developer.joomla.org">Developer Network</a></li> <li><a href="https://developer.joomla.org/security.html">Security Centre</a></li> <li><a href="https://issues.joomla.org">Issue Tracker</a></li> <li><a href="https://github.com/joomla">GitHub</a></li> <li><a href="https://api.joomla.org">API Documentation</a></li> <li><a href="https://framework.joomla.org"><span dir="ltr">Joomla!</span> Framework</a></li> </ul> </li> </ul> <div id="nav-search" class="navbar-search pull-right"> </div> </div> </div> </div> </div> </nav>  <header class="header"> <div class="container"> <div class="row-fluid"> <div class="span7"> <h1 class="page-title"> <a href="/">Joomla! Extensions Directory™</a> </h1> </div> <div class="span5"> <div class="btn-toolbar row-fluid"> <div class="span6"> <a href="https://downloads.joomla.org/" class="btn btn-block btn-large btn-warning">Download</a> </div> <div class="span6"> <a href="https://launch.joomla.org" class="btn btn-block btn-large btn-primary">Launch <span aria-hidden="true" class="icon-rocket"></span></a> </div> </div> </div> </div> </div> </header> <nav class="subnav-wrapper"> <div class="subnav"> <div class="container"> <ul class="nav nav-pills"> <li class="item-133 divider-vertical"><a href="/" >Home</a></li><li class="item-137 dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Browse Extensions <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-146 divider-vertical"><a href="/browse/top-rated" >Top Rated</a></li><li class="item-148 divider-vertical"><a href="/browse/most-reviewed" >Most Reviewed</a></li><li class="item-177 divider-vertical"><a href="/browse/new" >New</a></li><li class="item-393 divider-vertical"><a href="/browse/recently-updated" >Recently Updated</a></li><li class="item-926 divider-vertical"><a href="https://extensions.joomla.org/instant-search/?jed_live%5BrefinementList%5D%5Bversions%5D%5B0%5D=40" >Compatible with J4</a></li><li class="item-1403 divider-vertical"><a href="https://extensions.joomla.org/instant-search/?jed_live%5BrefinementList%5D%5Bversions%5D%5B0%5D=50" >Compatible with J5</a></li><li class="item-1402 divider-vertical"><a href="https://extensions.joomla.org/instant-search/?jed_live%5BrefinementList%5D%5Bversions%5D%5B0%5D=51" >Compatible with J5 (with b/c plugin)</a></li></ul></li><li class="item-935 divider-vertical"><a href="/instant-search" >Search</a></li><li class="item-984 dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Community <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-141 divider-vertical"><a href="https://volunteers.joomla.org/teams/extensions-directory-team" target="_blank" >Meet the JED Team</a></li><li class="item-928 divider-vertical"><a href="https://volunteers.joomla.org/teams/extensions-directory-team#reports" target="_blank" >Blog</a></li><li class="item-230 divider-vertical"><a href="https://community.joomla.org/joomla-extensions-directory-newsletter.html" >JED Newsletter</a></li><li class="item-142 divider-vertical"><a href="/community/terms-of-service" >Terms of Service</a></li><li class="item-956 divider-vertical"><a href="https://volunteers.joomla.org/help-wanted" target="_blank" >Help Joomla!</a></li></ul></li><li class="item-139 dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Support <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-1002 divider-vertical"><a href="/support/knowledgebase" >Knowledgebase</a></li><li class="item-955 divider-vertical"><a href="https://community.joomla.org/sponsorship-campaigns.html?utm_source=jed" target="_blank" >Sponsor Joomla!</a></li></ul></li><li class="item-1054 active dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Vulnerable Extensions <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-1063 current active divider-vertical"><a href="/vulnerable-extensions/about" >About</a></li><li class="item-1055 divider-vertical"><a href="/vulnerable-extensions/vulnerable" >Vulnerable Extensions</a></li><li class="item-1056 divider-vertical"><a href="/vulnerable-extensions/resolved" >Resolved Extensions</a></li><li class="item-1057 divider-vertical"><a href="/vulnerable-extensions/abandoned" >Abandoned Extensions</a></li><li class="item-1058 divider-vertical"><a href="/vulnerable-extensions/submit-a-report" >Submit a Report</a></li><li class="item-1059 divider-vertical"><a href="/vulnerable-extensions/submit-an-update" >Submit an Update</a></li><li class="item-1064 divider-vertical"><a href="/vulnerable-extensions/submit-abandonware" >Submit AbandonWare</a></li><li class="item-1061 divider-vertical"><a href="/vulnerable-extensions/json-feed" >JSON Feed</a></li></ul></li><li class="item-850 divider-vertical"><a href="/users-login-form" >Log in</a></li><li class="item-1038 divider-vertical"><a href="/users-registration-form" >Register</a></li></ul> <div class="search-top-box" style="margin-top: 4px;"> <input type="text" id="jed-autocomplete-search" class="search-top search-top-query " name="search-top" placeholder="Find the extension you're looking for" value="" style="border-left: 0;" /> </div> </div> </div> </nav>  <div class="body">  <div class="container"> <div aria-label="Breadcrumbs" role="navigation"> <ul itemscope itemtype="https://schema.org/BreadcrumbList" class="breadcrumb"> <li class="active"> <span class="divider icon-location"></span> </li> <li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"> <a itemprop="item" href="/" class="pathway"><span itemprop="name">Home</span></a> <span class="divider"> <img src="/media/system/images/arrow.png" alt="" /> </span> <meta itemprop="position" content="1"> </li> <li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"> <span itemprop="name"> Vulnerable Extensions </span> <span class="divider"> <img src="/media/system/images/arrow.png" alt="" /> </span> <meta itemprop="position" content="2"> </li> <li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem" class="active"> <span itemprop="name"> About </span> <meta itemprop="position" content="3"> </li> </ul> </div> </div> <div id="no-search-affix"> </div> <div class="container main"> <div class="row-fluid"> <div id="content" class="span9">  <div id="system-message-container"> </div> <div class="item-page" itemscope itemtype="https://schema.org/Article"> <meta itemprop="inLanguage" content="en-GB" /> <div class="page-header"> <h2 itemprop="headline"> The Joomla! ® Vulnerable Extensions List </h2> </div> <div itemprop="articleBody"> <p><strong><span class="jb_warning"> Please check with the extension publisher in case of any questions over the security of their product. </span> <br /></strong></p> <h2><span id="How_to_use_this_list" class="mw-headline"><strong>How to use this site</strong> </span></h2> <p>All known vulnerable extensions are listed in the <a href="/vulnerable-extensions/vulnerable">LIVE VEL </a>section. In these cases no patch is available and you are recommended to uninstall the extension from your site. The <a href="/vulnerable-extensions/resolved">resolved VEL</a> section lists extensions for which a patch is available, you are recommended to update if your site uses any of these extensions.</p> <p><strong>This list is compiled from found information and may not be an up to date accurate list</strong></p> <ul> <li><em>We do <strong>NOT</strong> promise to test or validate these reports.</em></li> <li><em>We do <strong>NOT</strong> guarantee the quality or effectiveness of any updates reported to us or listed here.</em></li> <li>We do not list BETA products, or extensions for J1.0.x  J1,5,x. or 2.5.x</li> </ul> <p><span style="font-size: 14pt;"><strong>How to report a suspected Vulnerable Extension.</strong></span><br /><a href="/vulnerable-extensions/submit-a-report" rel="alternate"><img class="pull-left" style="margin: 10px;" src="/images/static/vel-submit.jpg" alt="vel submit" /></a></p> <p><br />Select the <a href="/vulnerable-extensions/submit-a-report">Vulnerability Reporting Link.</a></p> <p> </p> <p> </p> <p> </p> <h2><span style="font-size: 14pt;"><strong><span id="Developers_-_How_to_get_yourself_removed_from_the_VEL">Developers - How to get yourself RESOLVED on the VEL</span></strong></span></h2> <p><a href="/vulnerable-extensions/submit-an-update" rel="alternate"> <img class="pull-left" style="margin: 20px;" src="/images/static/vel-update.jpg" alt="developer update link" width="293" height="147" /></a></p> <p><span style="font-size: 14pt;">Please solve the issues and:</span></p> <p> To have your extension marked as resolved, please follow these steps:</p> <p> Contact the <a href="/vulnerable-extensions/submit-an-update">VEL team* with a notice of resolution</a>, the latest version number <strong>and</strong> a link to the security release statement on your website. (Please read <a href="/vulnerable-extensions/about-security-releases">this article</a> for further information on making a security release notice). Create a <a class="external text" href="/support/support-tickets" rel="nofollow">JED listing owner ticket</a> to the JED with a notice and ask that your listing be republished. Include the full details of your new version number and security notice page</p> <ul> <li><strong>If not JED listed.</strong></li> </ul> <p><a href="/vulnerable-extensions/submit-an-update">Inform us with a notice of resolution</a>, the latest version number <strong>and</strong> a link to the security release statement on your website.</p> <p> * a developer must use <a href="/vulnerable-extensions/submit-an-update">the update form for notice </a>of resolution</p> </div> </div>  </div> <div id="aside" class="span3">  <div class="well "><div class="page-header"><strong>Vulnerable Extensions</strong></div><ul class="latestnews mod-list"> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/osticky2-other" itemprop="url"> <span itemprop="name"> osTicky2, , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/easyshop-1-4-1-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> EasyShop, 1.4.1, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/livingword-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> LivingWord, , XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/plugin-creative-gallery-sql-injection" itemprop="url"> <span itemprop="name"> Plugin Creative Gallery , , SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/proforms-basic-via-sort-order-parameter-sql-injection" itemprop="url"> <span itemprop="name"> Proforms Basic via sort_order parameter, , SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/extplorer-2-1-15-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> EXTPLORER, 2.1.15, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/lm-custom-admin-other" itemprop="url"> <span itemprop="name"> LM-CUSTOM-ADMIN, , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/admirror-gallery-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> admirror gallery, , XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/proforms-basic-joomla-module-other" itemprop="url"> <span itemprop="name"> Proforms Basic Joomla Module, , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/acymailing-other" itemprop="url"> <span itemprop="name"> acymailing, pre 8.7.0 , Other </span> </a> </li> </ul> </div><div class="well "><div class="page-header"><strong>Resolved Extensions</strong></div><ul class="latestnews mod-list"> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/js-jobs-1-4-2-sql-injection" itemprop="url"> <span itemprop="name"> JS Jobs, 1.4.2, SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/sourcer-12-00-other" itemprop="url"> <span itemprop="name"> Regularlabs Sourcer, pre version 12.00, Other/RFI </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/hikashop-5-1-1-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> HikaShop, 5.1.1, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/advanced-custom-fields-2-7-7-sql-injection" itemprop="url"> <span itemprop="name"> Advanced custom fields, 2.7.7, SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/phoca-gallery-5-0-0-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> Phoca Gallery, 5.0.0, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/hikashop-starter-4-7-5-2308101603-hikashop-starter-4-7-5-2308101603-xss-cross-site-scripting-2" itemprop="url"> <span itemprop="name"> HikaShop Starter 4.7.5 [2308101603], HikaShop Starter 4.7.5 [2308101603], XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/lazydbbackup-3-9-0-other" itemprop="url"> <span itemprop="name"> LazyDbBackup, 3.9.0, Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/virtual-classroom-sql-injection" itemprop="url"> <span itemprop="name"> Virtual Classroom, , SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/bagallery-other" itemprop="url"> <span itemprop="name"> bagallery , , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/solidres-2-13-3-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> Solidres, 2.13.3, XSS (Cross Site Scripting) </span> </a> </li> </ul> </div>  </div> </div> </div> <div class="container jed-banner-bottom"> <div class="custom" > <style type="text/css"> .ad_slot_horizontal { width: 320px; height: 100px; } /* Small devices (landscape phones, 576px and up) */ @media (min-width: 576px) { .ad_slot_horizontal { width: 468px; height: 60px; } } /* Medium devices (tablets, 768px and up) */ @media (min-width: 768px) { .ad_slot_horizontal { width: 100%; height: 90px; } } /* Large devices (desktops, 992px and up) */ @media (min-width: 992px) { .ad_slot_horizontal { width: 100%; height: 90px; } } /* Extra large devices (large desktops, 1200px and up) */ @media (min-width: 1200px) { .ad_slot_horizontal { width: 100%; height: 90px; } } </style> <div> <ins class="adsbygoogle ad_slot_horizontal" style="display: inline-block;" data-full-width-responsive="true" data-ad-client="ca-pub-1189370408998555" data-ad-slot="6544738538"></ins></div> <script src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js" async="async" type="text/javascript"></script> <script type="text/javascript"> (adsbygoogle = window.adsbygoogle || []).push({}); </script></div> </div> </div> </div>   <footer class="footer center"> <div class="container"> <hr /> <div class="social"> <ul class="soc"> <li><a href="https://twitter.com/joomla" target="_blank" rel="noopener" class="icon-twitter2" title="Joomla! on Twitter"><span class="element-invisible">Joomla! on Twitter</span></a></li> <li><a href="https://www.facebook.com/joomla" target="_blank" rel="noopener" class="icon-facebook2" title="Joomla! on Facebook"><span class="element-invisible">Joomla! on Facebook</span></a></li> <li><a href="https://www.youtube.com/user/joomla" target="_blank" rel="noopener" class="icon-youtube3" title="Joomla! on YouTube"><span class="element-invisible">Joomla! on YouTube</span></a></li> <li><a href="https://www.linkedin.com/company/joomla" target="_blank" rel="noopener" class="icon-linkedin" title="Joomla! on LinkedIn"><span class="element-invisible">Joomla! on LinkedIn</span></a></li> <li><a href="https://www.pinterest.com/joomla" target="_blank" rel="noopener" class="icon-pinterest2" title="Joomla! on Pinterest"><span class="element-invisible">Joomla! on Pinterest</span></a></li> <li><a href="https://www.instagram.com/joomlaofficial/" target="_blank" rel="noopener" class="icon-instagram" title="Joomla! on Instagram"><span class="element-invisible">Joomla! on Instagram</span></a></li> <li><a href="https://github.com/joomla" target="_blank" rel="noopener" class="icon-github3" title="Joomla! on GitHub"><span class="element-invisible">Joomla! on GitHub</span></a></li> </ul> </div> <div class="footer-menu"> <ul class="nav-inline"> <li><a href="https://www.joomla.org"><span>Home</span></a></li> <li><a href="https://www.joomla.org/about-joomla.html"><span>About</span></a></li> <li><a href="https://community.joomla.org"><span>Community</span></a></li> <li><a href="https://forum.joomla.org"><span>Forum</span></a></li> <li><a href="https://extensions.joomla.org"><span>Extensions</span></a></li> <li><a href="https://community.joomla.org/service-providers-directory.html"><span>Services</span></a></li> <li><a href="https://docs.joomla.org"><span>Docs</span></a></li> <li><a href="https://developer.joomla.org"><span>Developer</span></a></li> <li><a href="https://community.joomla.org/the-joomla-shop.html"><span>Shop</span></a></li> </ul> <ul class="nav-inline"> <li><a href="https://www.joomla.org/accessibility-statement.html">Accessibility Statement</a></li> <li><a href="https://www.joomla.org/privacy-policy.html">Privacy Policy</a></li> <li><a href="https://www.joomla.org/cookie-policy.html">Cookie Policy</a></li> <li><a href="https://community.joomla.org/sponsorship-campaigns.html">Sponsor Joomla! with $5</a></li> <li><a href="https://joomla.crowdin.com" target="_blank" rel="noopener">Help Translate</a></li> <li><a href="https://github.com/joomla/jed-issues/issues/new?body=Please%20describe%20the%20problem%20or%20your%20issue">Report an Issue</a></li> <li><a href="/users-login-form">Log in</a></li> </ul> <p class="copyright">© 2005 - 2025 <a href="https://opensourcematters.org">Open Source Matters, Inc.</a> All Rights Reserved.</p> <div class="hosting"> <div class="hosting-image"><a href="https://www.rochen.com/joomla-hosting" rel="noopener" target="_blank"><img class="rochen" width="84" height="42" src="https://cdn.joomla.org/rochen/rochen_footer_logo_white.png" alt="Rochen" /></a></div> <div class="hosting-text"><a href="https://www.rochen.com/joomla-hosting" rel="noopener" target="_blank"><span dir="ltr">Joomla!</span> Hosting by Rochen</a></div> </div> </div> <div id="adblock-msg" class="navbar navbar-fixed-bottom hide"> <div class="navbar-inner"> <a class="close" data-dismiss="alert" href="#">×</a> <i class="icon-warning"></i> We have detected that you are using an ad blocker. The Joomla! Project relies on revenue from these advertisements so please consider disabling the ad blocker for this domain. </div> </div> </div> </footer> <script type="text/javascript" src="/media/lib_fabrik/js/built.min.js"></script></body> </html>