CVE-2024-27186
[20240803] - Core - XSS in HTML Mail Templates
Summary
[20240803] - Core - XSS in HTML Mail Templates
Original description
The description as published by the source.
The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.
Affected packages
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"5.1.3"}]}]
References
- advisory developer.joomla.org
- web nvd.nist.gov