Joe Grey

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions 4.0.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3 **Description** The mail template feature lacks an escaping mechanism, which allows for Cross-Site Scripting (XSS) vectors across multiple extensions. XSS is a security flaw where malicious scripts are injected into trusted websites. **Recommendations** Update Joomla! Core versions 4.0.0 through 5.4.8 to a version newer than 5.4.8. Update Joomla! Core versions 6.0.0 through 6.1.3 to a version newer than 6.1.3.