This vulnerability in Joomla! CMS is due to lack of proper escaping in the file management view of the com_templates component, leading to a cross-site scripting (CWE-79) issue. An attacker with high privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of the affected application. The vulnerability affects versions 4.0.0 to 5.4.6 and 6.0.0 to 6.1.1. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of the Joomla! CMS application, potentially leading to session hijacking, defacement, or other malicious actions. However, the attack requires user interaction and high privileges, which limits the scope and ease of exploitation. The vulnerability does not affect confidentiality, integrity, or availability directly but poses a risk to user trust and application security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently documented, administrators should monitor Joomla! Project advisories for updates. In the meantime, restricting access to the affected component and limiting user privileges may reduce risk.