CVE-2010-0374: Codingfish Com Marketplace

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php.

Affected products

• Codingfish Com Marketplace: version 1.2 only

Published 2010-01-21. Last modified 2026-06-16.