NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cve-2026-90906

0 stories this week · 0 this month · 1 in 6 months · mostly security

Stories per day · 30 days

1 stories, newest first · one card per story

Joomla HTMLHelper::link lacks output escaping, enabling XSS in CMS 1.5.0-6.1.3; patches are 5.4.9 and 6.1.4.

Stories tagged #cve-2026-90906