CVE-2024-26278
[20240705] - Core - XSS in com_fields default field value
Summary
[20240705] - Core - XSS in com_fields default field value
Original description
The description as published by the source.
The Custom Fields component not correctly filter inputs, leading to a XSS vector.
Affected packages
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.7.0"},{"fixed":"5.1.2"}]}]
References
- advisory developer.joomla.org
- web nvd.nist.gov