Threats tagged 'ghsa-vfpr-256v-f8j4'

1 threat

Threats tagged 'ghsa-vfpr-256v-f8j4'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.3%	CVE-2026-92225Joomla! CMS · Cross-site Scripting Medium5.9EPSS 0.3%2026-09-29CVE Database V5CVE-2026-92225 CVE-2026-92225 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises because the module list layout does not properly escape user-supplied input, allowing an attacker to inject malicious scripts. This vulnerability has a medium severity rating with a CVSS score of 5.9. No known exploits are reported in the wild, and no official patch information is provided in the input data. EPSS 0.3%Vulnerability Joomla! Project #cwe-79 #ghsa-vfpr-256v-f8j4	CVE Database V5	2026-09-29

Showing 1–1 of 1 result