67 matches found
CVE-2022-27914 [20221101] - Core - RXSS through reflection of user input in com_media
An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...
CVE-2022-27914
CVE-2022-27914 affects Joomla! 4.0.0 through 4.2.4. The issue is a reflected XSS in com_media caused by inadequate filtering of user input. Impact is reflected XSS with low confidentiality/integrity impact and no availability impact per CVSS. Remediation: upgrade to Joomla! 4.2.5 or later (per ex...
CVE-2022-27914 [20221101] - Core - RXSS through reflection of user input in com_media
An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...
CVE-2022-27914
An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...
Joomla 4.0.x < 4.2.5 Joomla 4.2.5 Security and Bug Fix release (5873-joomla-4-2-5-security-and-bug-fix-release)
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 4.2.5. It is, therefore, affected by a vulnerability. - Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia.. CVE-2022-27914...
[20221101] - Core - RXSS through reflection of user input in com_media
Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...
CVE-2022-23801
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in commedia...
CVE-2022-23801
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in commedia...
CVE-2022-23801
Joomla! 4.0.0–4.1.0 is affected by a cross-site scripting (XSS) vulnerability via an SVG embedding path in com_media. Root cause: improper handling/cleanup of SVG content leading to executable HTML/script in the user’s browser. Public references describe a possible XSS attack vector through SVGs,...
Joomla! 4.0.0 Access Control Vulnerability
Joomla! is prone to an access control vulnerability in the commedia deletion endpoint. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[20220309] - Core - XSS attack vector through SVG
Possible XSS attack vector through SVG embedding in commedia...
CVE-2021-26040 [20210801] - Core - Insufficient access control for com_media deletion endpoint
An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command...
CVE-2021-26039
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of commedia leads to a XSS vulnerability...
Design/Logic Flaw
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of commedia leads to a XSS vulnerability...
CVE-2021-26039
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of commedia leads to a XSS vulnerability...
CVE-2021-26039 [20210705] - Core - XSS in com_media imagelist
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of commedia leads to a XSS vulnerability...
CVE-2021-26039
CVE-2021-26039 affects Joomla! 3.0.0 through 3.9.27. The issue is an inadequate escaping in the imagelist view of the com_media component, causing a Cross-Site Scripting (XSS) vulnerability. This is consistently reported across NVD, OSV, and related feeds, with no exploit details provided in the ...
CVE-2021-26039: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of commedia leads to a XSS vulnerability...
Joomla 2.5.x < 3.9.28 Multiple Vulnerabilities (5840-joomla-3-9-28)
According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.28. It is, therefore, affected by multiple vulnerabilities. - Inadequate escaping in the Rules field of the JForm API leads to a XSS vulnerability. CVE-2021-26035 - Missing...