CVE-2013-5583
Joomla! Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
- Record
CVE-2013-5583- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
- Record
CVE-2013-5583- Updated
- 2026-11-02
EUVDEUVD-2013-5423 No score
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
- Record
EUVD-2013-5423- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5xmg-w578-gq5j
Joomla! Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
- Record
GHSA-5xmg-w578-gq5j- CVSS 4.0
- 1.3 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVGHSA-5xmg-w578-gq5j
Joomla! Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
- Record
GHSA-5xmg-w578-gq5j- CVSS 4.0
- 1.3 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U - Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
joomla/joomla-cmsPackagist |
through 3.1.5 | 3.1.6 |
joomla/joomla-cmsPackagist |
before 3.1.6 | 3.1.6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5583 is a medium vulnerability (CVSS 4.3) in Joomla Joomla\!, published December 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 74th percentile. Fixed in joomla/joomla-cms 3.1.6.
References
securityfocus.com/bid/61600
disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability
nvd.nist.gov/vuln/detail/CVE-2013-5583
github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f
web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability