medium6.1
CVE-2024-27186
The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.
Impact
The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 4.0.0 before 4.4.7 from 5.0.0 before 5.1.3 |