Vulnerabilityhigh

Multiple XSS flaws in Joomla can lead to remote code execution

Security Affairsby @securityaffairsFeb 22, 2024 · 15:14 UTC (Feb 22, 2024)2 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-21722 CVE-2024-21723 CVE-2024-21724 CVE-2024-21725 CVE-2024-21726 CVE-2023-23752

Tags: cve-2024-21722 cve-2024-21723 cve-2024-21724 cve-2024-21725 cve-2024-21726 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-23752	Improper Access Control in Joomla! Webservice Endpoints (CVE-2023-23752)	5.3	100%	KEV	Feb 16, 2023 KEV Jan 8, 2024
CVE-2024-21726 +4 related CVEs CVE-2024-21725 CVE-2024-21722 CVE-2024-21724 CVE-2024-21723	Inadequate content filtering leads to XSS vulnerabilities in various components	6.5 group max	49%	PoC	Feb 29, 2024

From the original article

2 min read at securityaffairs.com

Joomla maintainers have addressed multiple vulnerabilities in the popular content management system (CMS) that can lead to execute arbitrary code. The maintainers of the Joomla! Project released Joomla 5.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.