← All advisories

Medium severity6.1NVD Advisory· Published Aug 20, 2024· Updated Jun 17, 2026

CVE-2024-40743

CVE-2024-40743

Description

The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Joomla/Joomla!4 versions
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=4.0.0,<4.4.6
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:elts:*:*:*range: >=3.0.0,<3.10.17
- (no CPE)
- (no CPE)range: 3.0.0-3.10.16
osv-coords
pkg:bitnami/joomla
Range: >= 3.0.0, < 5.1.3

Patches

Vulnerability mechanics

References

1

developer.joomla.org/security-centre/946-20240805-core-xss-vectors-in-outputfilter-strip-methods.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.