CVE-2024-21725
Assigner: Joomla
Published: 2024-02-20T16:22:57.554Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Joomla! CMS
vendor: Joomla! Project
versions: status: affected
version: 4.0.0-4.4.2
status: affected
version: 5.0.0-5.0.2
credits: type: finder
value: Gareth Heyes (PortSwigger Research)
descriptions: supportingMedia: base64: no
type: text/html
value: Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.
value: Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.
impacts: capecId: CAPEC-18
descriptions: value: CAPEC-18 XSS Targeting Non-Script Elements
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
source: discovery: UNKNOWN
title: [20240204] - Core - XSS in mail address outputs
x_generator: engine: Vulnogram 0.1.0-dev