Veille CVE

Recherche « Joomla! Project Joomla! Framework Filter package »

4 CVE

Critique 0 Élevée 0 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Joomla! Project Joomla! Framework Filter package » ✕
  1. CVE-2026-92232 6.5 Moyenne

    Joomla! Project Joomla! CMS · Joomla! Project Joomla! Framework Filter package · Joomla joomla\!

    Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The cleanAttribute method removes HTML data URIs, however injected whitespaces characters could circumvent that cleanup, causing an XSS vector.

  2. CVE-2026-92231 6.7 Moyenne

    Joomla! Project Joomla! CMS · Joomla! Project Joomla! Framework Filter package · Joomla joomla\!

    Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normalized an attribute value before testing it against the "javascript:" scheme regex, however without decoding HTML5 entities beforehand, causing an XSS vector.

  3. CVE-2026-48905 6.1 Moyenne

    Joomla! Project Joomla! Framework Filter package · Joomla joomla\!

    Lack of input filtering leads to an XSS vector in the HTML filter code.

  4. CVE-2026-48903 6.1 Moyenne

    Joomla! Project Joomla! Framework Filter package · Joomla joomla\!

    Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.