CVE-2022-27913: falha em Joomla! CMS
[20221002] - Core - RXSS through reflection of user input in headings
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.4%
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.
Produtos afetados
Joomla! Project · Joomla! CMSCVEs relacionadas — Joomla! CMS
No mesmo produto, das mais perigosas para as menos.
CVE-2023-23752MEDIUM[20230201] - Core - Improper access check in webservice endpointsEPSS 99.8%KEVCVE-2021-26030—[20210401] - Core - Escape xss in logo parameter error pagesEPSS 82.8%CVE-2021-23124—[20210102] - Core - XSS in mod_breadcrumbs aria-label attributeEPSS 79.0%CVE-2024-21726MEDIUM[20240205] - Core - Inadequate content filtering within the filter codeEPSS 48.8%CVE-2020-35613—[20201104] - Core - SQL injection in com_users list viewEPSS 28.9%CVE-2024-21725MEDIUM[20240204] - Core - XSS in mail address outputsEPSS 26.8%