Description
An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 3.7.0-3.10.6 | — |
Unscored
CVE-2022-23796
EUVD-2022-28730GHSA-rrr9-4pxc-wphj
[20220304] - Core - Missing input validation within com_fields class inputs
Published Mar 30, 2022 · Updated Feb 25, 2026 · Assigned by Joomla