CVE-2007-3249: Joomla! Letterman Subscriber

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) before 1.2.5 module for Joomla! allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter.

Affected products

• Joomla! Letterman Subscriber: up to and including 1.2.3

Published 2007-06-18. Last modified 2026-06-16.