CVE-2023-23754 [20230501] - Core - Open Redirect and XSS within the mfa select

2023-05-3016:12:44

Joomla

www.cve.org

joomla

vulnerability

input validation

open redirect

xss

mfa

EPSS

0.001

Percentile

49.3%

JSON

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Joomla! CMS",
    "vendor": "Joomla! Project",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0-4.3.1"
      }
    ]
  }
]