Access Control: Joomla JoomBri Careers 3.3.0 - Cross-Site Scripting¶

Identifier: joomla_joombri_careers_xss

Scanner(s) Support¶

Description¶

Joomla JoomBri Careers 3.3.0 is vulnerable to reflected XSS, allowing attackers to send malicious links that can steal session tokens or login credentials when victims click them.

How we test: We test for reflected XSS vulnerabilities in Joomla JoomBri Careers by injecting malicious payloads into request parameters and analyzing responses to detect if scripts are reflected and executed in the browser.

Reference:

• https://packetstormsecurity.com/files/168641/Joomla-JoomBri-Careers-3.3.0-Cross-Site-Scripting.html
• https://cxsecurity.com/issue/WLB-2022100024
• https://extensions.joomla.org/

Configuration¶

Example¶

Example configuration:

---
security_tests:
  joomla_joombri_careers_xss:
    skip: false

Reference¶

skip¶

Type : boolean

Skip the test if true.