CVE-2012-4071
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2...
CVE-2012-4071 is a medium vulnerability (CVSS 4.3) in Rsgallery2 Com Rsgallery2, published August 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.16%, the 67th percentile. No source names a fixed version.
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
- Record
CVE-2012-4071- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
- Record
CVE-2012-4071- Updated
- 2026-11-02
EUVDEUVD-2012-4015 No score
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
- Record
EUVD-2012-4015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5cc6-3r39-hc24 No score
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2...
Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.
- Record
GHSA-5cc6-3r39-hc24- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html
extensions.joomla.org/extensions/photos-a-images/photo-gallery/142
joomlacode.org/gf/project/rsgallery2/news
nvd.nist.gov/vuln/detail/CVE-2012-4071
github.com/advisories/GHSA-5cc6-3r39-hc24