CVE-2024-21724

State: PUBLISHED · Published: 2024-02-20 · Updated: 2025-03-29 · Assigner: Joomla

Description

Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.

CWE

CWE-79 — CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected

Joomla! Project / Joomla! CMS — v=1.6.0-3.10.14 [affected]; v=4.0.0-4.4.2 [affected]; v=5.0.0-5.0.2 [affected]

CVSS

References

Source

cvelistV5-main/cves/2024/21xxx/CVE-2024-21724.json