Lucene search
China National Vulnerability DatabaseCNVD-2022-64104HistoryMar 31, 2022 - 12:00 a.m.
Joomla! Cross-site scripting vulnerability (CNVD-2022-64104)
2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
0.002 Low
EPSS
Percentile
55.9%
Joomla! is a set of forum components used in the Joomla! content management system. versions 3.7.0 to 3.10.6 have a cross-site scripting vulnerability, which originates from the com_fields class that does not sufficiently clean up and escape data provided to the user, and can be used by attackers to execute JavaScript code on the client side.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Joomla Joomla! >=3.7.0， | le | 3.10.6 |
Related
prion
prion
Design/Logic Flaw
2022-03-30 16:15:00
cvelist
cvelist
joomla
joomla
[20220304] - Core - Missing input validation within com_fields class inputs
2021-05-06 00:00:00
openvas
openvas
Joomla! 3.7.0 - 3.10.6 XSS Vulnerability
2022-03-31 00:00:00
cve
cve
CVE-2022-23796
2022-03-30 16:15:11
osv
osv
CVE-2022-23796
2022-03-30 16:15:11
nvd
nvd
CVE-2022-23796
2022-03-30 16:15:11
nessus
nessus
Joomla! 4.x < 4.1.1 Multiple Vulnerabilities
2022-03-31 00:00:00
Joomla! 2.5.x < 3.10.7 Multiple Vulnerabilities
2022-03-31 00:00:00