GHSA-FM22-G2Q9-J3PW Joomla! CMS vulnerable to XSS via the input filter

Improper handling of input could lead to a cross-site scripting XSS vector in the checkAttribute method of the input filter framework class...

CVE-2025-54476

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...

CVE-2025-54476

CVE-2025-54476 describes an XSS vulnerability in Joomla!’s input filter framework, specifically in the checkAttribute method. The initial CVE entry reports improper handling of input leading to an XSS vector, with a CVSS 4.0 base score of 4.8 (Medium) and Network attack vector with High privilege...

CVE-2025-54476 Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...

CVE-2025-54476 Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...

CVE-2025-54476: Improper Neutralization of Input During Web Page Generation

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...

Joomla! CMS security vulnerabilities

Joomla! CMS is an open source content management system for Joomla! A security vulnerability exists in the Joomla! CMS input filtering framework, which stems from improper handling of inputs to the checkAttribute method and could lead to a cross-site scripting attack...

PT-2025-40003

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-54476 Description Improper handling of input can result in a cross-site scripting XSS vector within the checkAttribute method of the input filter framework class. Recommendations At the moment, there is no information...