BIT-JOOMLA-2024-27186 [20240803] - Core - XSS in HTML Mail Templates

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions...

CVE-2024-27186

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions...

CVE-2024-27186

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions...

CVE-2024-27186

The Joomla! content management system is vulnerable to Cross-Site Scripting (XSS) due to a lack of an escaping mechanism in the mail template feature . This flaw impacts multiple extensions and is present in Joomla! 3.x prior to 3.10.17 , 4.x prior to 4.4.7 , and 5.x prior to 5.1.3 . Exploitation...