CVE-2021-23129 [20210303] - Core - XSS within alert messages showed to users

2021-03-0200:00:00

Joomla

www.cve.org

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead to xss issues.

CNA Affected

[
  {
    "product": "Joomla! CMS",
    "vendor": "Joomla! Project",
    "versions": [
      {
        "status": "affected",
        "version": "2.5.0-3.9.24"
      }
    ]
  }
]

References

developer.joomla.org/security-centre/843-20210303-core-xss-within-alert-messages-showed-to-users.html