Threats tagged 'ghsa-8v43-g7hc-r72g'

1 threat

Threats tagged 'ghsa-8v43-g7hc-r72g'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-92231Joomla! CMS · Cross-site Scripting High7.1EPSS 0.3%2026-09-29CVE Database V5CVE-2026-92231 CVE-2026-92231 is a high-severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting multiple version ranges. The flaw arises from improper neutralization of input during web page generation due to an XSS filter bypass caused by HTML5 entity decode mismatch. Specifically, the checkAttribute method normalizes attribute values without decoding HTML5 entities before testing for the "javascript:" scheme, enabling an XSS vector. EPSS 0.3%Vulnerability Joomla! Project #cwe-79 #ghsa-8v43-g7hc-r72g	CVE Database V5	2026-09-29

Showing 1–1 of 1 result