Description
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 4.0.0-4.1.0 | — |
Unscored
CVE-2022-23801
EUVD-2022-28733GHSA-ffxv-f8p3-jqr2
[20220309] - Core - XSS attack vector through SVG
Published Mar 30, 2022 · Updated Feb 25, 2026 · Assigned by Joomla