[20221002] - Core - RXSS through reflection of user input in…(CVE-2022-27913)

概要

[20221002] - Core - RXSS through reflection of user input in headings

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"last_affected":"4.2.3"}]}]

参照URL

advisory developer.joomla.org
web nvd.nist.gov