Medium · 6.5 CVE-2024-21726 EUVD-2024-19342GHSA-r9wf-7v4g-f656

[20240205] - Core - Inadequate content filtering within the filter code

Published Feb 20, 2024 · Updated Dec 25, 2024 · Assigned by Joomla

Vendor: Joomla! Project Product: Joomla! CMS Category: Web / CMS

Description

Inadequate content filtering leads to XSS vulnerabilities in various components.

Affected products

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	3.7.0-3.10.14, 4.0.0-4.4.2, 5.0.0-5.0.2	—

Advisories 1

WID-SEC-2024-0430 Joomla: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 25, 2024

References

https://developer.joomla.org/security-centre/929-20240205-core-inadequate-content-filtering-within-the-filter-code.html vendor-advisory
https://www.sonarsource.com/blog/joomla-multiple-xss-vulnerabilities/ technical-description