CVE-2017-7987

In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template manager component.

We have discovered 129,929 live websites that are affected by CVE-2017-7987.

Run a Free Instant Scan



Affected Software

Product  Joomla
Category Content Management System
Vulnerable Domains129,929 live websites (97% of Joomla install base)
Vulnerable Versions
  • from 0 through 3.6.5
Vulnerable Versions Count45 versions ( 35% of all versions)



Details

  • Published - Apr 25, 2017
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-7987
United States7,185 websites


Italy36,717 websites
Russia11,621 websites
Germany7,103 websites
Kazakhstan7,017 websites
GB5,246 websites
Netherlands5,088 websites
South Africa4,612 websites
Serbia4,286 websites
Sweden3,729 websites

Website Distribution by TLD

Number of websites using CVE-2017-7987
.com28,248 websites
.it24,434 websites
.ru9,661 websites
.nl3,975 websites
.de3,709 websites
.se3,141 websites
.org3,110 websites
.cz2,980 websites
.co.uk2,769 websites
.net2,592 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-7987

Top websites that are affected by CVE-2017-7987. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.com Italy**,***
************.com United States**,***
************.com Germany**,***
*********************.com United States**,***
*****.org United States**,***
********.com Slovakia**,***
*****.it Italy**,***
*********.com United States**,***
******.cz Czech Republic**,***
*******.ru Russia**,***
See full domain list

FAQ

A total of 129,929 websites have been identified as vulnerable to CVE-2017-7987, based on global website indexing conducted by WebTechSurvey.
The Joomla is affected by the CVE-2017-7987 vulnerability.
Joomla versions up to and including 3.6.5 are vulnerable to CVE-2017-7987.