Description
An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of com_media leads to a XSS vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 3.0.0-3.9.27 | — |
Unscored
CVE-2021-26039
EUVD-2021-12862GHSA-73vf-29fw-xhq4
[20210705] - Core - XSS in com_media imagelist
Published Jul 7, 2021 · Updated Feb 25, 2026 · Assigned by Joomla