PT-2021-15379 · Joomla · Joomla!

CVE-2021-23124

Published

2021-01-12

Updated

2025-04-03

CVSS v3.1

6.1

Medium

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.9.0 through 3.9.23

Description The issue is related to a lack of escaping in the aria-label attribute of the mod breadcrumbs module, which allows XSS attacks.

Recommendations For Joomla! versions 3.9.0 through 3.9.23, update to a version that includes the fix for this issue to prevent XSS attacks.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

BIT-JOOMLA-2021-23124

CVE-2021-23124

Joomla!