PT-2026-31730 · Joomla · Solidres

Cracker · Published 2026-04-09 · Updated 2026-04-09 · CVE-2023-54363

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla Solidres version 2.13.3

Description Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts. Attackers can manipulate multiple GET parameters, including show, reviews, type id, distance, facilities, categories, prices, location, and Itemid, to craft malicious URLs containing JavaScript payloads. When victims visit these crafted links, attackers can potentially steal session tokens, login credentials, or manipulate site content.

Recommendations Update Joomla Solidres to a newer version that contains a fix for this vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-54363

Affected Products

Solidres

References · 7

• 🔥 https://exploit-db.com/exploits/51638 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54363 · Security Note
• https://twitter.com/infoflowcloud/status/2042355992080347249 · Twitter Post
• https://extensions.joomla.org/extension/vertical-markets/booking-a-reservations/solidres · Note
• https://vulncheck.com/advisories/joomla-solidres-reflected-xss-via-multiple-parameters · Note
• https://twitter.com/CVEnew/status/2042355086970482774 · Twitter Post
• http://solidres.com · Note