Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.
We have discovered 129,950 live websites that are affected by CVE-2017-9934.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 129,950 live websites (97% of Joomla install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 47 versions ( 36% of all versions) |
| 7,187 websites | |
| 36,719 websites | |
| 11,624 websites | |
| 7,105 websites | |
| 7,017 websites | |
| 5,247 websites | |
| 5,088 websites | |
| 4,612 websites | |
| 4,286 websites | |
| 3,729 websites |
| .com | 28,253 websites |
| .it | 24,436 websites |
| .ru | 9,664 websites |
| .nl | 3,975 websites |
| .de | 3,711 websites |
| .se | 3,141 websites |
| .org | 3,110 websites |
| .cz | 2,982 websites |
| .co.uk | 2,770 websites |
| .net | 2,593 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.com | **,*** | ||
| ************.com | **,*** | ||
| ************.com | **,*** | ||
| *********************.com | **,*** | ||
| *****.org | **,*** | ||
| ********.com | **,*** | ||
| *****.it | **,*** | ||
| *********.com | **,*** | ||
| ******.cz | **,*** | ||
| *******.ru | **,*** |