Quick Index Free Pro Extension For Joomla
Monthly
Stored cross-site scripting in Quick Index (Free/Pro) extension for Joomla allows a privileged attacker to inject persistent script payloads by supplying a crafted class configuration value that breaks out of its HTML attribute context. Because Quick Index generates executable HTML output after Joomla's built-in content security filter has already processed plugin syntax, the platform's native XSS protection cannot intercept the injected payload. All versions prior to 5.0.5 are affected; no public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Quick Index (Free/Pro) extension for Joomla allows a privileged attacker to inject persistent script payloads by supplying a crafted class configuration value that breaks out of its HTML attribute context. Because Quick Index generates executable HTML output after Joomla's built-in content security filter has already processed plugin syntax, the platform's native XSS protection cannot intercept the injected payload. All versions prior to 5.0.5 are affected; no public exploit code or CISA KEV listing has been identified at time of analysis.