Medium · 6.1 CVE-2024-21729 EUVD-2024-19345GHSA-2c9f-7jg2-vp9c

[20240701] - Core - XSS in accessible media selection field

Published Jul 9, 2024 · Updated Mar 26, 2025 · Assigned by Joomla

Vendor: Joomla! Project Product: Joomla! CMS Category: Web / CMS

Description

Inadequate input validation leads to XSS vulnerabilities in the accessiblemedia field.

Affected products

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	4.0.0-4.4.5, 5.0.0-5.1.1	—

Advisories 1

WID-SEC-2024-1573 Joomla: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Jul 9, 2024

References

https://developer.joomla.org/security-centre/935-20240701-core-xss-in-accessible-media-selection-field.html vendor-advisory