CVE-2026-65882 is a reflected XSS vulnerability in the Joomdle component for Joomla, affecting versions 0.7.0 up to 3.0.1. The vulnerability is due to improper neutralization of input in the 'goto' URL parameter of the Moodle wrapper endpoint, which can be exploited to execute arbitrary scripts in the context of the affected web application. This vulnerability is classified under CWE-79 and has a CVSS v3.1 base score of 6.1, indicating a medium level of severity. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected user's browser session, potentially leading to information disclosure or session hijacking. The impact is limited to confidentiality and integrity with no direct availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when handling untrusted input in the 'goto' parameter and consider implementing web application firewall (WAF) rules to detect and block suspicious requests targeting this parameter.