CVE-2012-4071: RSGALLERY2 Com RSGALLERY2

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to inject arbitrary web script or HTML via crafted BBCode markup in a comment.

Affected products

• RSGALLERY2 Com RSGALLERY2: up to and including 2.2.1; version 1.9.0-4 only; version 1.9.4 only; version 1.9.5 only; version 1.10.1 only; version 1.10.2 only; …

Published 2012-08-10. Last modified 2026-06-16.