Description

An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.

Remediation

References

CVE-2022-23801

Related Vulnerabilities

Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.1)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44310)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835)

MySQL CVE-2012-3166 Vulnerability (CVE-2012-3166)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)

Severity

Medium

Classification

CVE-2022-23801 CWE-707

Tags

Missing Update Known Vulnerabilities