CVE-2021-26030 [20210401] - Core - Escape xss in logo parameter error pages

2021-04-1417:34:57

Joomla

www.cve.org

joomla

xss

error pages

EPSS

0.001

Percentile

42.3%

JSON

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page

CNA Affected

[
  {
    "product": "Joomla! CMS",
    "vendor": "Joomla! Project",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.0-3.9.25"
      }
    ]
  }
]