CVE-2021-23129
[20210303] - Core - XSS within alert messages showed to users
Summary
[20210303] - Core - XSS within alert messages showed to users
Original description
The description as published by the source.
An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead to xss issues.
Affected packages
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"2.5.0"},{"fixed":"3.9.25"}]}]
References
- advisory developer.joomla.org
- web nvd.nist.gov