GHSA-v84j-vh7x-g7j6
Joomla! XSS in Default Templates
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | joomla/joomla-cms | >= 3.0.0, < 3.9.12 | 3.9.12 |
Details
As written in the advisory (Markdown source, shown as plain text).
In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
References
External links from the advisory. They lead to third-party sites.