[20210401] - Core - Escape xss in logo parameter error pages
25Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 82%
exploitation probability
82%top 1% of all CVEs
observed exploitation
nono source reports it
An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page
Affected products
Joomla! Project · Joomla! CMS