CVE-2024-21726

MEDIUM

Joomla! 3.7.0-3.10.14 - Cross-Site Scripting via Inadequate Content Filtering

Title source: llm

Inadequate content filtering leads to XSS vulnerabilities in various components.

Core 2

Core References

Vendor Advisory vendor-advisory

Exploit, Third Party Advisory technical-description

CVSS v3 6.5

EPSS 0.0030

EPSS Percentile 53.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-79

Status published

Products (1)

joomla/joomla\! 3.7.0 - 3.10.15

Published Feb 29, 2024

Tracked Since Feb 18, 2026