Threats tagged 'ghsa-gv72-vwwm-957f'

1 threat

Threats tagged 'ghsa-gv72-vwwm-957f'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-90918Joomla! CMS · Cross-site Scripting Medium6.9EPSS 0.2%2026-09-29CVE Database V5CVE-2026-90918 CVE-2026-90918 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from the mail template feature lacking proper escaping mechanisms, allowing injection of malicious scripts in HTML mail templates. This vulnerability has a medium severity rating with a CVSS score of 6.9. EPSS 0.2%Vulnerability Joomla! Project #cwe-79 #ghsa-gv72-vwwm-957f	CVE Database V5	2026-09-29

Showing 1–1 of 1 result