Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-65882 EUVD-2026-49788GHSA-f46h-cmh6-3vf3

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1

Published Jul 28, 2026 · Updated Jul 29, 2026 · Assigned by Joomla

Description

Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a reflected XSS vector.

Affected products

VendorProductAffectedFixed
joomdle.com Joomdle component for Joomla 0.7.0-3.0.1 —

References