BIT-joomla-2023-23754

vendorUSosv

[20230501] - Core - Open Redirect and XSS within the mfa select

view advisory published 2025-04-03Licence: per source

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-23754US	medium6.1	0.41% (35th)	—	2023-05-30
An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

references

External citations — patches, advisories, analysis.

https://developer.joomla.org/security-centre/899-20230501-core-open-redirects-and-xss-within-the-mfa-selection.htmlADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2023-23754WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan