CVE-2022-23796

Wednesday, March 30, 2022

N/A

N/A

Summary

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.

Affected Software

Vendor	Product	Version Range	Status
Joomla! Project	Joomla! CMS	`3.7.0-3.10.6`	affected

Weaknesses

XSS

ADP Enrichment

CVE Program Container

Additional References

https://developer.joomla.org/security-centre/873-20220304-core-missing-input-validation-within-com-fields-class-inputs.html

References

https://developer.joomla.org/security-centre/873-20220304-core-missing-input-validation-within-com-fields-class-inputs.html

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.