CVE-2022-27913
[20221002] - Core - RXSS through reflection of user input in headings
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Patch referenciado
Lifecycle
25 Oct 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.
Affected products
Joomla! Project · Joomla! CMSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →