[20221002] - Core - RXSS through reflection of user input in… (CVE-2022-27913)

Summary

[20221002] - Core - RXSS through reflection of user input in headings

Original description

The description as published by the source.

An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami joomla

[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"last_affected":"4.2.3"}]}]

References

advisory developer.joomla.org
web nvd.nist.gov