Description
An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead to xss issues.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 2.5.0-3.9.24 | — |
Unscored
CVE-2021-23129
EUVD-2021-10247GHSA-5qp6-q86g-pjq8
[20210303] - Core - XSS within alert messages showed to users
Published Mar 4, 2021 · Updated Feb 25, 2026 · Assigned by Joomla