CVE-2024-40748

Lack of output escaping in the id attribute of menu lists...

Joomla! XSS Vulnerability (20250102)

Joomla! is prone to a cross-site scripting XSS vulnerability in the id attribute of menu. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-40748

creationtimestamp| type| source ---|---|--- 2025-01-07 16:27:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113788009462822787 2025-01-07 17:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65n34y672f 2025-01-07 17:48:47+00:00| seen|...

CVE-2024-40748

The Joomla! content management system is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to a lack of output escaping in the id attribute of menu lists. This issue affects multiple versions, including Joomla! 3.x prior to 3.10.20, 4.x prior to 4.4.10, and 5.x prior to 5.2.3. The vuln...