CVE-2026-48905

Lack of input filtering leads to an XSS vector in the HTML filter code...

CVE-2026-48905 Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.

Lack of input filtering leads to an XSS vector in the HTML filter code...

Joomla 3.0.x < 5.4.6 / 6.0.x < 6.1.1 Joomla 6.1.1 & 5.4.6 Security & Bugfix Release (5954-joomla-6-1-1-5-4-6-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 5.4.6 or 6.0.x prior to 6.1.1. It is, therefore, affected by a vulnerability. - Lack of input filtering leads to an XSS vector in the HTML filter code. CVE-2026-48905 Note that Nessu...