CVE-2021-26030

[20210401] - Core - Escape xss in logo parameter error pages

published April 14, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS

—

EPSS

82%

Percentile

99.7

In the wild

Unconfirmed

What it is

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.82264 · 99.7th percentile
Published: 2021-04-14T17:34Z

EPSS history

Timeline

14 APR 17:34Z
[20210401] - Core - Escape xss in logo parameter error pages
cvelistv5