NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2024-21724

CVSS 3.1: 6.1 medium
EPSS: <1%p42
Published: Feb 29, 2024 · Feb 29, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-21724 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.

Vendors: joomla

Products: joomla\!

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

1 story

Multiple XSS flaws in Joomla can lead to remote code execution

Security AffairsFeb 22, 15:14 UTC · Feb 22, 2024VulnerabilityCVE-2024-21722 CVE-2024-21723 CVE-2024-21724+33

47