CVE-2025-63083

Lack of output escaping leads to a XSS vector in the pagebreak plugin...

CVE-2025-63083

creationtimestamp| type| source ---|---|--- 2026-01-07 14:50:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbtpontlva2s...

Joomla! XSS Vulnerability (20260102)

Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla 3.9.x < 5.4.2 / 6.0.x < 6.0.2 Joomla 6.0.2 & 5.4.2 Security & Bugfix Release (5942-joomla-6-0-2-and-5-4-2-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.9.x prior to 5.4.2 or 6.0.x prior to 6.0.2. It is, therefore, affected by a vulnerability. - Lack of output escaping leads to a XSS vector in the pagebreak plugin. CVE-2025-63083 Note that Nessus...