CVE-2023-23754 — [20230501] - Core - Open Redirect and XSS within the mfa select

CVE-2023-23754

[20230501] - Core - Open Redirect and XSS within the mfa select PUBLISHED

Description (CNA)

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

Affected (CNA)

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.2.0-4.3.1

CWE

No CWE identifiers supplied.

References

https://developer.joomla.org/security-centre/899-20230501-core-open-redirects-and-xss-within-the-mfa-selection.html

ADP enrichment

CVE

No English description supplied.

https://developer.joomla.org/security-centre/899-20230501-core-open-redirects-and-xss-within-the-mfa-selection.html

CISA-ADP

No English description supplied.

No references supplied.