Description

An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of com_media leads to a XSS vulnerability.

Remediation

References

CVE-2021-26039

Related Vulnerabilities

WordPress Plugin Google Alert And Twitter Multiple Vulnerabilities (3.1.5)

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20901)

concrete5 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8082)

WordPress Plugin Crelly Slider Multiple Unspecified Vulnerabilities (1.1.1)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Cross-Site Request Forgery (4.10.1)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2021-26039