[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
25Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 81%
exploitation probability
81%top 1% of all CVEs
observed exploitation
nono source reports it
An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.
Affected products
Joomla! Project · Joomla! CMS