Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-23800 BIT-joomla-2022-23800EUVD-2022-1518GHSA-qcv6-h33g-hvrc

[20220308] - Core - Inadequate content filtering within the filter code

Published Mar 30, 2022 · Updated Feb 25, 2026 · Assigned by Joomla

Vendor: Joomla! Project Product: Joomla! CMS Product: joomla/filter Package: joomla/filter Category: Web / CMS Ecosystem: Packagist

Description

An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.

Affected products

VendorProductAffectedFixed
Joomla! Project Joomla! CMS 4.0.0-4.1.0 —
Joomla! Project joomla/filter 1.0.0-1.4.3 & 2.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist joomla/filter < 1.4.4 1.4.4 GHSA-qcv6-h33g-hvrc
Packagist joomla/filter >= 2.0.0, < 2.0.1 2.0.1 GHSA-qcv6-h33g-hvrc

References