CVE-2024-21724
Assigner: Joomla
Published: 2024-02-20T16:22:56.838Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Joomla! CMS
vendor: Joomla! Project
versions: status: affected
version: 1.6.0-3.10.14
status: affected
version: 4.0.0-4.4.2
status: affected
version: 5.0.0-5.0.2
credits: type: finder
value: Dominik Ziegelmüller
descriptions: supportingMedia: base64: no
type: text/html
value: Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.
value: Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.
impacts: capecId: CAPEC-18
descriptions: value: CAPEC-18 XSS Targeting Non-Script Elements
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
source: discovery: UNKNOWN
title: [20240203] - Core - XSS in media selection fields
x_generator: engine: Vulnogram 0.1.0-dev