Joomla! 4.2.* Reflected XSS via Reflected Input in Various Components
CVE-2022-27913 Published on October 25, 2022

[20221002] - Core - RXSS through reflection of user input in headings
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.

Vendor Advisory NVD


Products Associated with CVE-2022-27913

Want to know whenever a new CVE is published for Joomla? stack.watch will email you.

Joomla
 

Affected Versions

Joomla! Project Joomla! CMS Version 4.2.0-4.2.3 is affected by CVE-2022-27913

Exploit Probability

EPSS
0.15%
Percentile
34.80%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.