← All advisories

Unrated severityNVD Advisory· Published Jan 7, 2025· Updated Jan 8, 2025

[20250102] - Core - XSS vector in the id attribute of menu lists

CVE-2024-40748

Description

Lack of output escaping in the id attribute of menu lists.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

osv-coords
pkg:bitnami/joomla
Range: >= 3.9.0, < 5.2.3
Joomla/Joomla!v5
Range: 3.0.0-3.10.19

Patches

Vulnerability mechanics

References

1

developer.joomla.org/security-centre/955-20250102-core-xss-vector-in-the-id-attribute-of-menu-lists.htmlmitrevendor-advisory

News mentions

0

No linked articles in our index yet.