BIT-joomla-2022-27913

vendorUSosv

[20221002] - Core - RXSS through reflection of user input in headings

view advisory published 2025-04-03Licence: per source

An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-27913US	medium6.1	0.44% (38th)	Exploit	2022-10-25
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.

references

External citations — patches, advisories, analysis.

https://developer.joomla.org/security-centre/886-20221002-core-reflected-xss-in-various-components.htmlADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2022-27913WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan