Access Control: Joomla Solidres 2.13.3 - Cross-Site Scripting¶

Identifier: joomla_solidres_xss

Scanner(s) Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner	ASM Scanner

Description¶

Joomla extension for Solidres is vulnerable to cross-site scripting in the GET parameter 'show', allowing attackers to execute arbitrary scripts.

How we test: We test for XSS vulnerabilities in Joomla Solidres by injecting malicious payloads into the show parameter and analyzing responses to detect if scripts are executed in the browser.

Reference:

Configuration¶

Example¶

Example configuration:

---
security_tests:
  joomla_solidres_xss:
    skip: false

Reference¶

`skip`¶

Type : boolean

Skip the test if true.