Patchman reports an xss vulnerabilty; latest version of T3

skelp

Hi,

Using the latest version of T3, patcham returns en xxs vulnerability on a few of my sites for this file: plugins/system/t3/base/html/com_contact/contact/default.php

What should I do?

saguaros

skelp
Hi,

I've not used this patchman before, did you experience the same issue with our demo site here? http://demo.t3-framework.org/joomla30/index.php/en/joomla-pages/sample-page-1/contacts

If yes, kindly share the detailed report so I can check.

skelp

Hi,

Patchman is a program used by my hosting provider to scan viruses and vulnerabilities on websites.
Though I am using the latest version of t3, patchman reports an xss-vulnerability.

I compared the file in the link above with the file on my websites and they are exactly the same.

teitbite

skelp Hi. I've just review the code of this file and there is no way for an xss-vulnerability attack from it since the entered source is validated. Also an exactly same file can be found in joomla's default template, so this should be listed as well.