Threats tagged 'bit-joomla-2024-26278'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.4%	CVE-2024-26278Joomla · [20240705] - Core - XSS in com_fields default field value MediumEPSS 0.4%2025-04-03GCVE DatabaseCVE-2024-26278 A cross-site scripting (XSS) vulnerability exists in Joomla's Custom Fields component due to improper input filtering in the default field value. This flaw affects Joomla versions from 3.7.0 up to but not including 5.1.2. The vulnerability allows injection of malicious scripts via the default field value, potentially impacting users who interact with affected fields. EPSS 0.4%Vulnerability #bit-joomla-2024-26278 #bitnami	GCVE Database	2025-04-03

Page 1 of 1