Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-54476 EUVD-2025-31744GHSA-fm22-g2q9-j3pw

Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

Published Sep 30, 2025 · Updated Oct 1, 2025 · Assigned by Joomla

Vendor: Joomla! Project Product: Joomla! CMS Package: joomla/filter Category: Web / CMS Ecosystem: Packagist

Description

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.

Affected products

VendorProductAffectedFixed
Joomla! Project Joomla! CMS 3.0.0-3.10.20, 4.0.0-4.4.13, 5.0.0-5.3.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist joomla/filter >= 4.0.0, < 4.0.1 4.0.1 GHSA-fm22-g2q9-j3pw
Packagist joomla/filter >= 3.0.0, < 3.0.5 3.0.5 GHSA-fm22-g2q9-j3pw
Packagist joomla/filter < 2.0.6 2.0.6 GHSA-fm22-g2q9-j3pw

Advisories 1

References