CVE-2021-23130
[20210304] - Core - XSS within the feed parser library
概要
[20210304] - Core - XSS within the feed parser library
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues.
影響パッケージ
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"2.5.0"},{"fixed":"3.9.25"}]}]
参照URL
- advisory developer.joomla.org
- web nvd.nist.gov