{"data":{"id":"CVE-2015-3619","cve_id":"CVE-2015-3619","title":"Cross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla!","summary":"Cross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla!","severity":"MEDIUM","cvss":{"score":5.4,"version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","source":"nvd"},"published_at":"2018-02-06T16:29:00.447000Z","modified_at":"2026-06-17T00:25:59.177000Z","withdrawn_at":null,"is_joomla":true,"is_joomla_core":false,"relevance":"certain","product":"virtuemart","extension":{"type":null,"name":"virtuemart"},"sources":["nvd"],"source_count":1,"url":"https://cve.oyer.fr/cve/CVE-2015-3619","description":"Cross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a \"double encode combination of first_name, last_name and company.\"","cwe":["CWE-79"],"affected":[{"package":null,"product":"virtuemart","vendor":"virtuemart","ecosystem":null,"cpe":"cpe:2.3:a:virtuemart:virtuemart:*:*:*:*:*:joomla\\!:*:*","version_start":null,"version_end":"3.0.8","version_end_inclusive":false,"fixed_version":"3.0.8","type":null,"source":"nvd"}],"references":[{"url":"http://dev.virtuemart.net/projects/virtuemart/repository/diff/trunk/virtuemart/administrator/components/com_virtuemart/assets/js/vm2admin.js?utf8=%E2%9C%93&rev=8828&rev_to=8670","title":"Patch, Vendor Advisory","source":"nvd"},{"url":"https://fortiguard.com/zeroday/FG-VD-15-027","title":"Third Party Advisory","source":"nvd"},{"url":"https://virtuemart.net/news/470-release-vm3-0-8-2-secured-by-fortinet-s-fortiguard-labs","title":"Patch, Vendor Advisory","source":"nvd"}],"source_records":[{"source":"nvd","external_id":"CVE-2015-3619","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3619","severity":"MEDIUM","cvss_score":5.4,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cvss_version":"3.0","first_seen_at":"2026-09-26T09:34:14.091832Z","last_seen_at":"2026-09-26T09:34:14.091832Z"}],"history":[{"at":"2026-09-26T09:34:14.091832Z","event":"created","source":"nvd","detail":"Détectée via nvd"}]}}