← CVE Intelligence

CVE-2021-26030

[20210401] - Core - Escape xss in logo parameter error pages PUBLISHED

Description (CNA)

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page

Affected (CNA)

Vendor / productVersions
Joomla! Project / Joomla! CMSaffected 3.0.0-3.9.25

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.