BIT-JOOMLA-2024-40748 [20250102] - Core - XSS vector in the id attribute of menu lists

Lack of output escaping in the id attribute of menu lists...

CVE-2024-40748

Lack of output escaping in the id attribute of menu lists...

CVE-2024-40748

Lack of output escaping in the id attribute of menu lists...

CVE-2024-40748 [20250102] - Core - XSS vector in the id attribute of menu lists

Lack of output escaping in the id attribute of menu lists...

CVE-2024-40748 [20250102] - Core - XSS vector in the id attribute of menu lists

Lack of output escaping in the id attribute of menu lists...

CVE-2024-40748

CVE-2024-40748 is confirmed in Joomla! core as a cross-site scripting (XSS) vector in the id attribute of menu lists. Multiple connected sources describe lack of output escaping in the id attribute, with no specific exploit details or fixes provided in the documents. The CVSSv3.1 base score is 7....

PT-2025-2598 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a lack of output escaping in the id attribute of menu lists. This could potentially lead to issues where user input is not...

[20250102] - Core - XSS vector in the id attribute of menu lists

Joomla! CMS versions 3.0.0-3.10.19-elts, 4.0.0-4.4.9, 5.0.0-5.2.2...