CVE-2021-23129
[20210303] - Core - XSS within alert messages showed to users
概要
[20210303] - Core - XSS within alert messages showed to users
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead to xss issues.
影響パッケージ
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"2.5.0"},{"fixed":"3.9.25"}]}]
参照URL
- advisory developer.joomla.org
- web nvd.nist.gov