Threats tagged 'ghsa-943m-2293-5c6p'

CVE-2026-92232 is a high-severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting multiple version ranges. The issue arises from the cleanAttribute method failing to properly sanitize HTML data URIs when injected with whitespace characters, allowing an attacker to bypass the XSS filter. This vulnerability affects Joomla! versions 1.5.0 through 5.4.8, 6.0.0 through 6.1.3, 1.0.0 through 3.0.6, and 4.0.0 through 4.1.0. The vulnerability has a CVSS 4.0 base score of 7.1, indicating high severity. No patch or remediation information is provided in the source data.