Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2007-4189
Multiple cross-site scripting (XSS) vulnerabilities in Joomla before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) com_search (2) com_content and (3) mod_login components. NOTE: some of these details are obtained from third party information.