high8.6
CVE-2026-77027
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an store…
Impact
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.
Affected products
| Product | Affected versions |
|---|---|
| Fabrik | before 4.7.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.