← CVE Intelligence

CVE-2024-26278

[20240705] - Core - XSS in com_fields default field value PUBLISHED

Description (CNA)

The Custom Fields component not correctly filter inputs, leading to a XSS vector.

Affected (CNA)

Vendor / productVersions
Joomla! Project / Joomla! CMSaffected 3.7.0-3.10.15; affected 4.0.0-4.4.5; affected 5.0.0-5.1.1

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.