Demyanchuk V

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions 1.5.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3 **Description** Cross-Site Scripting (XSS) occurs due to a lack of escaping in the `link()` function of the HTMLHelper class. XSS is a security flaw where malicious scripts are injected into trusted websites. **Recommendations** As a temporary workaround, restrict the use of the `link()` function within the HTMLHelper class until a patch is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.