← All advisories

Unrated severityNVD Advisory· Published Aug 20, 2024· Updated Nov 3, 2024

[20240805] - Core - XSS vectors in Outputfilter::strip* methods

CVE-2024-40743

Description

The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

osv-coords
pkg:bitnami/joomla
Range: >= 3.0.0, < 5.1.3
Joomla/Joomla!v5
Range: 3.0.0-3.10.16

Patches

Vulnerability mechanics

References

1

developer.joomla.org/security-centre/946-20240805-core-xss-vectors-in-outputfilter-strip-methods.htmlmitrevendor-advisory

News mentions

0

No linked articles in our index yet.