PT-2026-102694 · Joomla · Joomla!
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Joomla! Core versions 4.0.0 through 5.4.8
Joomla! Core versions 6.0.0 through 6.1.3
Description
The mail template feature lacks an escaping mechanism, which allows for Cross-Site Scripting (XSS) vectors across multiple extensions. XSS is a security flaw where malicious scripts are injected into trusted websites.
Recommendations
Update Joomla! Core versions 4.0.0 through 5.4.8 to a version newer than 5.4.8.
Update Joomla! Core versions 6.0.0 through 6.1.3 to a version newer than 6.1.3.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Joomla!