[20260809] - Core - Improper ACL checks when injection schema.org contact data
Joomla fixed CVE-2026-73372, an improper ACL check that leaks inaccessible contact items' data into schema.org snippets, affecting CMS 5.1.0-5.4.7 and 6.0.0-6.1.2.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #schema-org
[20260806] - Core - XSS through schema.org outputs
Joomla fixed CVE-2026-73336, an XSS in schema.org markup outputs caused by improper escaping, affecting CMS 5.1.0-5.4.7 and 6.0.0-6.1.2.