CINXE.COM

<!DOCTYPE html> <html lang="en-gb" dir="ltr"> <head><script type="text/javascript">liveSite = "";</script> <meta charset="utf-8" /> <base href="https://extensions.joomla.org/vulnerable-extensions/vulnerable/" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="apple-mobile-web-app-status-bar-style" content="blue" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:site" content="@joomla" /> <meta name="twitter:description" content="The Platform Millions of Websites Are Built On" /> <meta name="twitter:image" content="https://extensionscdn.joomla.org/images/social-images/jed-twitter-card.png" /> <meta name="twitter:title" content="Joomla.org" /> <meta name="referrer" content="unsafe-url" /> <meta property="og:site_name" content="Joomla! Extensions Directory™" /> <meta property="og:image" content="https://extensionscdn.joomla.org/images/social-images/jed-og.jpg" /> <meta name="description" content="Find extensions for your Joomla site in the Joomla Extensions Directory, the official directory for Joomla components, modules and plugins." /> <meta name="generator" content="Joomla! - Open Source Content Management" /> <title>Vulnerable Extensions</title> <link href="/vulnerable-extensions/vulnerable?format=feed&type=rss" rel="alternate" type="application/rss+xml" title="RSS 2.0" /> <link href="/vulnerable-extensions/vulnerable?format=feed&type=atom" rel="alternate" type="application/atom+xml" title="Atom 1.0" /> <link href="/templates/joomla/images/apple-touch-icon-180x180.png" rel="apple-touch-icon" sizes="180x180" /> <link href="/templates/joomla/images/apple-touch-icon-152x152.png" rel="apple-touch-icon" sizes="152x152" /> <link href="/templates/joomla/images/apple-touch-icon-144x144.png" rel="apple-touch-icon" sizes="144x144" /> <link href="/templates/joomla/images/apple-touch-icon-120x120.png" rel="apple-touch-icon" sizes="120x120" /> <link href="/templates/joomla/images/apple-touch-icon-114x114.png" rel="apple-touch-icon" sizes="114x114" /> <link href="/templates/joomla/images/apple-touch-icon-76x76.png" rel="apple-touch-icon" sizes="76x76" /> <link href="/templates/joomla/images/apple-touch-icon-72x72.png" rel="apple-touch-icon" sizes="72x72" /> <link href="/templates/joomla/images/apple-touch-icon-57x57.png" rel="apple-touch-icon" sizes="57x57" /> <link href="/templates/joomla/images/apple-touch-icon.png" rel="apple-touch-icon" /> <link href="/templates/joomla/favicon.ico" rel="shortcut icon" type="image/vnd.microsoft.icon" /> <link href="/media/com_jce/site/css/content.min.css?badb4208be409b1335b815dde676300e" rel="stylesheet" /> <link href="//netdna.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css" rel="stylesheet" /> <link href="https://cdn.joomla.org/template/css/template_3.0.0.min.css" rel="stylesheet" /> <link href="/templates/joomla/css/custom.min.css?58078ce81daeb621adcad0ed85ed6ea8" rel="stylesheet" /> <link href="https://fonts.googleapis.com/css?family=Open+Sans" rel="stylesheet" /> <link href="/media/jui/css/chosen.css?58078ce81daeb621adcad0ed85ed6ea8" rel="stylesheet" /> <link href="/media/com_finder/css/finder.css?58078ce81daeb621adcad0ed85ed6ea8" rel="stylesheet" /> <style> .hide { display: none; } .table-noheader { border-collapse: collapse; } .table-noheader thead { display: none; } h1, h2, h3, h4, h5, h6 { font-family: 'Open Sans', sans-serif; } </style> <script type="application/json" class="joomla-script-options new">{"csrf.token":"4b3f8a7556862e95bdc21ed4494e4f0f","system.paths":{"root":"","base":""}}</script> <script src="/media/jui/js/jquery.min.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/media/jui/js/jquery-noconflict.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/media/jui/js/jquery-migrate.min.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/media/jui/js/bootstrap.min.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/media/system/js/caption.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/media/system/js/core.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/templates/joomla/js/template.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/templates/joomla/js/blockadblock.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="/templates/joomla/js/js.cookie.js?58078ce81daeb621adcad0ed85ed6ea8"></script>  <script src="/media/jui/js/chosen.jquery.min.js?58078ce81daeb621adcad0ed85ed6ea8"></script> <script src="https://cdn.jsdelivr.net/algoliasearch/3/algoliasearch.min.js?58078ce81daeb621adcad0ed85ed6ea8" defer></script> <script src="https://cdn.jsdelivr.net/autocomplete.js/0/autocomplete.min.js?58078ce81daeb621adcad0ed85ed6ea8" defer></script> <script src="/media/com_jed/js/autocomplete.min.js?58078ce81daeb621adcad0ed85ed6ea8" defer></script> <script> jQuery(window).on('load', function() { new JCaption('img.caption'); }); jQuery(function($){ initPopovers(); $("body").on("subform-row-add", initPopovers); function initPopovers (event, container) { $(container || document).find(".hasPopover").popover({"html": true,"trigger": "hover focus","container": "body"});} }); jQuery(function($){ initTooltips(); $("body").on("subform-row-add", initTooltips); function initTooltips (event, container) { container = container || document;$(container).find(".hasTooltip").tooltip({"html": true,"container": "body"});} }); jQuery(function ($) { initChosen(); $("body").on("subform-row-add", initChosen); function initChosen(event, container) { container = container || document; $(container).find(".advancedSelect").chosen({"disable_search_threshold":10,"search_contains":true,"allow_single_deselect":true,"placeholder_text_multiple":"Type or select some options","placeholder_text_single":"Select an option","no_results_text":"No results match"}); } }); jQuery(document).ready(function() { var value, searchword = jQuery('#mod-finder-searchword185'); // Get the current value. value = searchword.val(); // If the current value equals the default value, clear it. searchword.on('focus', function () { var el = jQuery(this); if (el.val() === 'Search ...') { el.val(''); } }); // If the current value is empty, set the previous value. searchword.on('blur', function () { var el = jQuery(this); if (!el.val()) { el.val(value); } }); jQuery('#mod-finder-searchform185').on('submit', function (e) { e.stopPropagation(); var advanced = jQuery('#mod-finder-advanced185'); // Disable select boxes with no value selected. if (advanced.length) { advanced.find('select').each(function (index, el) { var el = jQuery(el); if (!el.val()) { el.attr('disabled', 'disabled'); } }); } });}); var jAutoComplete = window.jAutoComplete || []; jAutoComplete.push({"algoliaApplicationId":"BLPSS1JDLM","algoliaSearchOnlyApiKey":"45457336014964a3858de02be398ea70","algoliaIndexName":"jed_live","hits":7,"name":"core_title","category":"core_catid","tags":"tags","url":"url"}); </script> </head> <body class="site com_content view-category layout-default task-display itemid-1055">  <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-MH6RGF" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript> <script>(function(w, d, s, l, i) { w[l] = w[l] || []; w[l].push({'gtm.start': new Date().getTime(), event: 'gtm.js'}); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-MH6RGF');</script>   <nav class="navigation" role="navigation"> <div id="mega-menu" class="navbar navbar-inverse navbar-fixed-top"> <div class="navbar-inner"> <div class="container"> <a class="btn btn-navbar" data-toggle="collapse" data-target=".nav-collapse"> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon-bar"></span> </a> <div class="nav-collapse collapse"> <ul id="nav-joomla" class="nav"> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#"> <span dir="ltr"><span aria-hidden="true" class="icon-joomla"></span> Joomla!<sup>®</sup></span> <span class="caret"></span> </a> <ul class="dropdown-menu"> <li class="nav-header"><span>About us</span></li> <li> <a href="https://www.joomla.org"> <span aria-hidden="true" class="icon-joomla"></span> Joomla Home </a> </li> <li><a href="https://www.joomla.org/about-joomla.html">What is Joomla?</a></li> <li><a href="https://www.joomla.org/core-features.html">Benefits & Features</a></li> <li><a href="https://www.joomla.org/about-joomla/the-project.html">Project & Leadership</a></li> <li><a href="https://tm.joomla.org">Trademark & Licensing</a></li> <li><a href="https://joomlafoundation.org">The Joomla Foundation</a></li> <li class="divider"></li> <li class="nav-header"><span>Support us</span></li> <li><a href="https://www.joomla.org/contribute-to-joomla.html">Contribute</a></li> <li><a href="https://www.joomla.org/sponsor.html">Sponsor</a></li> <li><a href="https://www.joomla.org/about-joomla/partners.html">Partner</a></li> <li><a href="https://shop.joomla.org">Shop</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Download & Extend <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://downloads.joomla.org">Downloads</a></li> <li><a href="https://extensions.joomla.org">Extensions</a></li> <li><a href="https://downloads.joomla.org/language-packs">Languages</a></li> <li><a href="https://launch.joomla.org">Get a free site</a></li> <li><a href="https://domains.joomla.org">Get a domain</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Discover & Learn <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://docs.joomla.org">Documentation</a></li> <li><a href="https://community.joomla.org/joomla-training.html">Training</a></li> <li><a href="https://certification.joomla.org">Certification</a></li> <li><a href="https://showcase.joomla.org">Site Showcase</a></li> <li><a href="https://www.joomla.org/announcements.html">Announcements</a></li> <li><a href="https://community.joomla.org/blogs.html">Blogs</a></li> <li><a href="https://magazine.joomla.org">Magazine</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Community & Support <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://community.joomla.org">Community Portal</a></li> <li><a href="https://community.joomla.org/events.html">Events</a></li> <li><a href="https://community.joomla.org/user-groups.html">User Groups</a></li> <li><a href="https://forum.joomla.org">Forum</a></li> <li><a href="https://community.joomla.org/service-providers-directory.html">Service Providers Directory</a></li> <li><a href="https://volunteers.joomla.org">Volunteers Portal</a></li> <li><a href="https://extensions.joomla.org/vulnerable-extensions/vulnerable/">Vulnerable Extensions List</a></li> </ul> </li> <li class="dropdown"> <a class="dropdown-toggle" data-toggle="dropdown" href="#">Developer Resources <span class="caret"></span></a> <ul class="dropdown-menu"> <li><a href="https://developer.joomla.org">Developer Network</a></li> <li><a href="https://developer.joomla.org/security.html">Security Centre</a></li> <li><a href="https://issues.joomla.org">Issue Tracker</a></li> <li><a href="https://github.com/joomla">GitHub</a></li> <li><a href="https://api.joomla.org">API Documentation</a></li> <li><a href="https://framework.joomla.org"><span dir="ltr">Joomla!</span> Framework</a></li> </ul> </li> </ul> <div id="nav-search" class="navbar-search pull-right"> </div> </div> </div> </div> </div> </nav>  <header class="header"> <div class="container"> <div class="row-fluid"> <div class="span7"> <h1 class="page-title"> <a href="/">Joomla! Extensions Directory™</a> </h1> </div> <div class="span5"> <div class="btn-toolbar row-fluid"> <div class="span6"> <a href="https://downloads.joomla.org/" class="btn btn-block btn-large btn-warning">Download</a> </div> <div class="span6"> <a href="https://launch.joomla.org" class="btn btn-block btn-large btn-primary">Launch <span aria-hidden="true" class="icon-rocket"></span></a> </div> </div> </div> </div> </div> </header> <nav class="subnav-wrapper"> <div class="subnav"> <div class="container"> <ul class="nav nav-pills"> <li class="item-133 divider-vertical"><a href="/" >Home</a></li><li class="item-137 dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Browse Extensions <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-146 divider-vertical"><a href="/browse/top-rated" >Top Rated</a></li><li class="item-148 divider-vertical"><a href="/browse/most-reviewed" >Most Reviewed</a></li><li class="item-177 divider-vertical"><a href="/browse/new" >New</a></li><li class="item-393 divider-vertical"><a href="/browse/recently-updated" >Recently Updated</a></li><li class="item-926 divider-vertical"><a href="https://extensions.joomla.org/instant-search/?jed_live%5BrefinementList%5D%5Bversions%5D%5B0%5D=40" >Compatible with J4</a></li><li class="item-1403 divider-vertical"><a href="https://extensions.joomla.org/instant-search/?jed_live%5BrefinementList%5D%5Bversions%5D%5B0%5D=50" >Compatible with J5</a></li><li class="item-1402 divider-vertical"><a href="https://extensions.joomla.org/instant-search/?jed_live%5BrefinementList%5D%5Bversions%5D%5B0%5D=51" >Compatible with J5 (with b/c plugin)</a></li></ul></li><li class="item-935 divider-vertical"><a href="/instant-search" >Search</a></li><li class="item-984 dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Community <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-141 divider-vertical"><a href="https://volunteers.joomla.org/teams/extensions-directory-team" target="_blank" >Meet the JED Team</a></li><li class="item-928 divider-vertical"><a href="https://volunteers.joomla.org/teams/extensions-directory-team#reports" target="_blank" >Blog</a></li><li class="item-230 divider-vertical"><a href="https://community.joomla.org/joomla-extensions-directory-newsletter.html" >JED Newsletter</a></li><li class="item-142 divider-vertical"><a href="/community/terms-of-service" >Terms of Service</a></li><li class="item-956 divider-vertical"><a href="https://volunteers.joomla.org/help-wanted" target="_blank" >Help Joomla!</a></li></ul></li><li class="item-139 dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Support <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-1002 divider-vertical"><a href="/support/knowledgebase" >Knowledgebase</a></li><li class="item-955 divider-vertical"><a href="https://community.joomla.org/sponsorship-campaigns.html?utm_source=jed" target="_blank" >Sponsor Joomla!</a></li></ul></li><li class="item-1054 active dropdown parent divider-vertical"> <a href="#" data-toggle="dropdown" role="button" class="dropdown-toggle"> Vulnerable Extensions <b class="caret"></b></a><ul class="dropdown-menu"><li class="item-1063 divider-vertical"><a href="/vulnerable-extensions/about" >About</a></li><li class="item-1055 current active divider-vertical"><a href="/vulnerable-extensions/vulnerable" >Vulnerable Extensions</a></li><li class="item-1056 divider-vertical"><a href="/vulnerable-extensions/resolved" >Resolved Extensions</a></li><li class="item-1057 divider-vertical"><a href="/vulnerable-extensions/abandoned" >Abandoned Extensions</a></li><li class="item-1058 divider-vertical"><a href="/vulnerable-extensions/submit-a-report" >Submit a Report</a></li><li class="item-1059 divider-vertical"><a href="/vulnerable-extensions/submit-an-update" >Submit an Update</a></li><li class="item-1064 divider-vertical"><a href="/vulnerable-extensions/submit-abandonware" >Submit AbandonWare</a></li><li class="item-1061 divider-vertical"><a href="/vulnerable-extensions/json-feed" >JSON Feed</a></li></ul></li><li class="item-850 divider-vertical"><a href="/users-login-form" >Log in</a></li><li class="item-1038 divider-vertical"><a href="/users-registration-form" >Register</a></li></ul> <div class="search-top-box" style="margin-top: 4px;"> <input type="text" id="jed-autocomplete-search" class="search-top search-top-query " name="search-top" placeholder="Find the extension you're looking for" value="" style="border-left: 0;" /> </div> </div> </div> </nav>  <div class="body">  <div class="container"> <div aria-label="Breadcrumbs" role="navigation"> <ul itemscope itemtype="https://schema.org/BreadcrumbList" class="breadcrumb"> <li class="active"> <span class="divider icon-location"></span> </li> <li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"> <a itemprop="item" href="/" class="pathway"><span itemprop="name">Home</span></a> <span class="divider"> <img src="/media/system/images/arrow.png" alt="" /> </span> <meta itemprop="position" content="1"> </li> <li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem"> <span itemprop="name"> Vulnerable Extensions </span> <span class="divider"> <img src="/media/system/images/arrow.png" alt="" /> </span> <meta itemprop="position" content="2"> </li> <li itemprop="itemListElement" itemscope itemtype="https://schema.org/ListItem" class="active"> <span itemprop="name"> Vulnerable Extensions </span> <meta itemprop="position" content="3"> </li> </ul> </div> </div> <div id="no-search-affix"> </div> <div class="container main"> <div class="row-fluid"> <div id="content" class="span9">  <div id="system-message-container"> </div> <div class="category-list"> <div> <div class="content-category"> <h2> Vulnerable Extensions </h2> <div class="category-desc"> <h2>This category lists vulnerable extensions for which no patch is known to  exists. You are recommended to uninstall any listed here from your site. <a href="https://extensions.joomla.org/index.php?option=com_content&view=category&id=10511&Itemid=1056">Patched extensions are moved to the Resolved category</a>.</h2> <div class="clr"></div> </div> <form action="https://extensions.joomla.org/vulnerable-extensions/vulnerable/" method="post" name="adminForm" id="adminForm" class="form-inline"> <fieldset class="filters btn-toolbar clearfix"> <legend class="hide">Filters</legend> <div class="btn-group"> <label class="filter-search-lbl element-invisible" for="filter-search"> Title Filter  </label> <input type="text" name="filter-search" id="filter-search" value="" class="inputbox" onchange="document.adminForm.submit();" title="Content Filter Search" placeholder="Title Filter" /> </div> <div class="btn-group pull-right"> <label for="limit" class="element-invisible"> Display # </label> <select id="limit" name="limit" class="inputbox input-mini" size="1" onchange="this.form.submit()"> <option value="5">5</option> <option value="10" selected="selected">10</option> <option value="15">15</option> <option value="20">20</option> <option value="25">25</option> <option value="30">30</option> <option value="50">50</option> <option value="100">100</option> <option value="0">All</option> </select> </div> <input type="hidden" name="filter_order" value="" /> <input type="hidden" name="filter_order_Dir" value="" /> <input type="hidden" name="limitstart" value="" /> <input type="hidden" name="task" value="" /> </fieldset> <div class="control-group hide pull-right"> <div class="controls"> <button type="submit" name="filter_submit" class="btn btn-primary">Filter</button> </div> </div> <table class="category table table-striped table-bordered table-hover"> <caption class="hide">List of articles in category Vulnerable Extensions</caption> <thead> <tr> <th scope="col" id="categorylist_header_title"> <a href="#" onclick="Joomla.tableOrdering('a.title','asc','', document.getElementById('adminForm'));return false;" class="hasPopover" title="Title" data-content="Select to sort by this column" data-placement="top">Title</a> </th> <th scope="col" id="categorylist_header_date"> <a href="#" onclick="Joomla.tableOrdering('a.publish_up','asc','');return false;" class="hasPopover" title="Published Date" data-content="Select to sort by this column" data-placement="top">Published Date</a> </th> </tr> </thead> <tbody> <tr class="cat-list-row0" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/osticky2-other"> osTicky2, , Other </a> </td> <td headers="categorylist_header_date" class="list-date small"> 03 March 2024 </td> </tr> <tr class="cat-list-row1" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/easyshop-1-4-1-xss-cross-site-scripting"> EasyShop, 1.4.1, XSS (Cross Site Scripting) </a> </td> <td headers="categorylist_header_date" class="list-date small"> 19 October 2023 </td> </tr> <tr class="cat-list-row0" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/livingword-xss-cross-site-scripting"> LivingWord, , XSS (Cross Site Scripting) </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row1" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/plugin-creative-gallery-sql-injection"> Plugin Creative Gallery , , SQL Injection </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row0" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/proforms-basic-via-sort-order-parameter-sql-injection"> Proforms Basic via sort_order parameter, , SQL Injection </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row1" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/extplorer-2-1-15-xss-cross-site-scripting"> EXTPLORER, 2.1.15, XSS (Cross Site Scripting) </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row0" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/lm-custom-admin-other"> LM-CUSTOM-ADMIN, , Other </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row1" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/admirror-gallery-xss-cross-site-scripting"> admirror gallery, , XSS (Cross Site Scripting) </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row0" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/proforms-basic-joomla-module-other"> Proforms Basic Joomla Module, , Other </a> </td> <td headers="categorylist_header_date" class="list-date small"> 22 August 2023 </td> </tr> <tr class="cat-list-row1" > <td headers="categorylist_header_title" class="list-title"> <a href="/vulnerable-extensions/vulnerable/acymailing-other"> acymailing, pre 8.7.0 , Other </a> </td> <td headers="categorylist_header_date" class="list-date small"> 18 August 2023 </td> </tr> </tbody> </table> <div class="pagination"> <p class="counter pull-right"> Page 1 of 24 </p> <ul class="pagination-list"> <li class="disabled"> <span><span class="icon-first"></span></span> </li> <li class="disabled"> <span><span class="icon-previous"></span></span> </li> <li class="active hidden-phone"> <span>1</span> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=10" class="pagenav hidden-phone">2</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=20" class="pagenav hidden-phone">3</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=30" class="pagenav hidden-phone">4</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=40" class="pagenav hidden-phone">...</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=50" class="pagenav hidden-phone">6</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=60" class="pagenav hidden-phone">7</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=70" class="pagenav hidden-phone">8</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=80" class="pagenav hidden-phone">9</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=90" class="pagenav hidden-phone">10</a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=10" class="pagenav hasTooltip" title="Next"><span class="icon-next"></span></a> </li> <li> <a href="/vulnerable-extensions/vulnerable?start=230" class="pagenav hasTooltip" title="End"><span class="icon-last"></span></a> </li> </ul> </div> </form> </div> </div> </div>  </div> <div id="aside" class="span3">  <div class="well "><div class="page-header"><strong>VEL Search</strong></div> <div class="finder"> <form id="mod-finder-searchform185" action="/component/finder/search?f=1" method="get" class="form-search" role="search"> <label for="mod-finder-searchword185" class="element-invisible finder">Search</label><input type="text" name="q" id="mod-finder-searchword185" class="search-query input-medium" size="25" value="" placeholder="Search ..."/><br /><button class="btn btn-primary hasTooltip finder" type="submit" title="Go"><span class="icon-search icon-white"></span>Search</button> <input type="hidden" name="f" value="1" /><input type="hidden" name="Itemid" value="1055" /> </form> </div> </div><div class="well "><div class="page-header"><strong>Vulnerable Extensions</strong></div><ul class="latestnews mod-list"> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/osticky2-other" itemprop="url"> <span itemprop="name"> osTicky2, , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/easyshop-1-4-1-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> EasyShop, 1.4.1, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/livingword-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> LivingWord, , XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/plugin-creative-gallery-sql-injection" itemprop="url"> <span itemprop="name"> Plugin Creative Gallery , , SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/proforms-basic-via-sort-order-parameter-sql-injection" itemprop="url"> <span itemprop="name"> Proforms Basic via sort_order parameter, , SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/extplorer-2-1-15-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> EXTPLORER, 2.1.15, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/lm-custom-admin-other" itemprop="url"> <span itemprop="name"> LM-CUSTOM-ADMIN, , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/admirror-gallery-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> admirror gallery, , XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/proforms-basic-joomla-module-other" itemprop="url"> <span itemprop="name"> Proforms Basic Joomla Module, , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/vulnerable/acymailing-other" itemprop="url"> <span itemprop="name"> acymailing, pre 8.7.0 , Other </span> </a> </li> </ul> </div><div class="well "><div class="page-header"><strong>Resolved Extensions</strong></div><ul class="latestnews mod-list"> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/hikashop-5-1-1-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> HikaShop, 5.1.1, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/advanced-custom-fields-2-7-7-sql-injection" itemprop="url"> <span itemprop="name"> Advanced custom fields, 2.7.7, SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/phoca-gallery-5-0-0-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> Phoca Gallery, 5.0.0, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/hikashop-starter-4-7-5-2308101603-hikashop-starter-4-7-5-2308101603-xss-cross-site-scripting-2" itemprop="url"> <span itemprop="name"> HikaShop Starter 4.7.5 [2308101603], HikaShop Starter 4.7.5 [2308101603], XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/lazydbbackup-3-9-0-other" itemprop="url"> <span itemprop="name"> LazyDbBackup, 3.9.0, Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/virtual-classroom-sql-injection" itemprop="url"> <span itemprop="name"> Virtual Classroom, , SQL Injection </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/bagallery-other" itemprop="url"> <span itemprop="name"> bagallery , , Other </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/solidres-2-13-3-xss-cross-site-scripting" itemprop="url"> <span itemprop="name"> Solidres, 2.13.3, XSS (Cross Site Scripting) </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/edocman-1-24-7-xss-issue-fixed" itemprop="url"> <span itemprop="name"> Edocman 1.24.7 - XSS issue fixed </span> </a> </li> <li itemscope itemtype="https://schema.org/Article"> <a href="/vulnerable-extensions/resolved/quickform-other" itemprop="url"> <span itemprop="name"> quickform, , Other </span> </a> </li> </ul> </div>  </div> </div> </div> <div class="container jed-banner-bottom"> <div class="custom" > <style type="text/css"> .ad_slot_horizontal { width: 320px; height: 100px; } /* Small devices (landscape phones, 576px and up) */ @media (min-width: 576px) { .ad_slot_horizontal { width: 468px; height: 60px; } } /* Medium devices (tablets, 768px and up) */ @media (min-width: 768px) { .ad_slot_horizontal { width: 100%; height: 90px; } } /* Large devices (desktops, 992px and up) */ @media (min-width: 992px) { .ad_slot_horizontal { width: 100%; height: 90px; } } /* Extra large devices (large desktops, 1200px and up) */ @media (min-width: 1200px) { .ad_slot_horizontal { width: 100%; height: 90px; } } </style> <div> <ins class="adsbygoogle ad_slot_horizontal" style="display: inline-block;" data-full-width-responsive="true" data-ad-client="ca-pub-1189370408998555" data-ad-slot="6544738538"></ins></div> <script src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js" async="async" type="text/javascript"></script> <script type="text/javascript"> (adsbygoogle = window.adsbygoogle || []).push({}); </script></div> </div> </div> </div>   <footer class="footer center"> <div class="container"> <hr /> <div class="social"> <ul class="soc"> <li><a href="https://twitter.com/joomla" target="_blank" rel="noopener" class="icon-twitter2" title="Joomla! on Twitter"><span class="element-invisible">Joomla! on Twitter</span></a></li> <li><a href="https://www.facebook.com/joomla" target="_blank" rel="noopener" class="icon-facebook2" title="Joomla! on Facebook"><span class="element-invisible">Joomla! on Facebook</span></a></li> <li><a href="https://www.youtube.com/user/joomla" target="_blank" rel="noopener" class="icon-youtube3" title="Joomla! on YouTube"><span class="element-invisible">Joomla! on YouTube</span></a></li> <li><a href="https://www.linkedin.com/company/joomla" target="_blank" rel="noopener" class="icon-linkedin" title="Joomla! on LinkedIn"><span class="element-invisible">Joomla! on LinkedIn</span></a></li> <li><a href="https://www.pinterest.com/joomla" target="_blank" rel="noopener" class="icon-pinterest2" title="Joomla! on Pinterest"><span class="element-invisible">Joomla! on Pinterest</span></a></li> <li><a href="https://www.instagram.com/joomlaofficial/" target="_blank" rel="noopener" class="icon-instagram" title="Joomla! on Instagram"><span class="element-invisible">Joomla! on Instagram</span></a></li> <li><a href="https://github.com/joomla" target="_blank" rel="noopener" class="icon-github3" title="Joomla! on GitHub"><span class="element-invisible">Joomla! on GitHub</span></a></li> </ul> </div> <div class="footer-menu"> <ul class="nav-inline"> <li><a href="https://www.joomla.org"><span>Home</span></a></li> <li><a href="https://www.joomla.org/about-joomla.html"><span>About</span></a></li> <li><a href="https://community.joomla.org"><span>Community</span></a></li> <li><a href="https://forum.joomla.org"><span>Forum</span></a></li> <li><a href="https://extensions.joomla.org"><span>Extensions</span></a></li> <li><a href="https://community.joomla.org/service-providers-directory.html"><span>Services</span></a></li> <li><a href="https://docs.joomla.org"><span>Docs</span></a></li> <li><a href="https://developer.joomla.org"><span>Developer</span></a></li> <li><a href="https://community.joomla.org/the-joomla-shop.html"><span>Shop</span></a></li> </ul> <ul class="nav-inline"> <li><a href="https://www.joomla.org/accessibility-statement.html">Accessibility Statement</a></li> <li><a href="https://www.joomla.org/privacy-policy.html">Privacy Policy</a></li> <li><a href="https://www.joomla.org/cookie-policy.html">Cookie Policy</a></li> <li><a href="https://community.joomla.org/sponsorship-campaigns.html">Sponsor Joomla! with $5</a></li> <li><a href="https://joomla.crowdin.com" target="_blank" rel="noopener">Help Translate</a></li> <li><a href="https://github.com/joomla/jed-issues/issues/new?body=Please%20describe%20the%20problem%20or%20your%20issue">Report an Issue</a></li> <li><a href="/users-login-form">Log in</a></li> </ul> <p class="copyright">© 2005 - 2024 <a href="https://opensourcematters.org">Open Source Matters, Inc.</a> All Rights Reserved.</p> <div class="hosting"> <div class="hosting-image"><a href="https://www.rochen.com/joomla-hosting" rel="noopener" target="_blank"><img class="rochen" width="84" height="42" src="https://cdn.joomla.org/rochen/rochen_footer_logo_white.png" alt="Rochen" /></a></div> <div class="hosting-text"><a href="https://www.rochen.com/joomla-hosting" rel="noopener" target="_blank"><span dir="ltr">Joomla!</span> Hosting by Rochen</a></div> </div> </div> <div id="adblock-msg" class="navbar navbar-fixed-bottom hide"> <div class="navbar-inner"> <a class="close" data-dismiss="alert" href="#">×</a> <i class="icon-warning"></i> We have detected that you are using an ad blocker. The Joomla! Project relies on revenue from these advertisements so please consider disabling the ad blocker for this domain. </div> </div> </div> </footer> <script type="text/javascript" src="/media/lib_fabrik/js/built.min.js"></script></body> </html>