PT-2026-77196

CVE-2026-73336

Published

2026-08-18

Updated

2026-09-04

Description by

CVSS 3.1

6.4

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 5.1.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2

Description Improper escaping flags in schema.org markup outputs create a Cross-Site Scripting (XSS) vector. XSS is a security flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update Joomla! Core versions 5.1.0 through 5.4.7 to a version newer than 5.4.7. Update Joomla! Core versions 6.0.0 through 6.1.2 to a version newer than 6.1.2.

Exploitability

Fix

Impacts

Researchers

Amin İsayev

Arib06

Rodolfo Tavares

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers