CVE-2021-23124

[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute

published January 12, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
79%
Percentile
99.6
In the wild
Unconfirmed
What it is

An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.78960 · 99.6th percentile
Published
2021-01-12T20:19Z
EPSS history
Timeline
  • 12 JAN 20:19Z
    [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
    cvelistv5