CVE-2021-23124 — [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute

CVE-2021-23124

[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute PUBLISHED

Description (CNA)

An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 3.9.0-3.9.23

No CWE identifiers supplied.

CVE

No English description supplied.