joomla joomla CVE-2022-23796 is a vulnerability in Joomla
Published on March 30, 2022

[20220304] - Core - Missing input validation within com_fields class inputs
An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.

Vendor Advisory NVD


Products Associated with CVE-2022-23796

Want to know whenever a new CVE is published for Joomla? stack.watch will email you.

Joomla
 

Affected Versions

Joomla! Project Joomla! CMS Version 3.7.0-3.10.6 is affected by CVE-2022-23796

Exploit Probability

EPSS
0.12%
Percentile
31.46%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.