https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:02:06.295513+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-joomla-2024-27186 BIT-joomla-2024-27186 — [20240803] - Core - XSS in HTML Mail Templates 2026-10-06T14:02:06.300848+00:00

Affected: Bitnami: joomla

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0701 certfr-2024-avi-0701 — De multiples vulnérabilités ont été découvertes dans Joomla!. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T14:02:06.300915+00:00 certfr-2024-avi-0701 https://cve.radiocsirt.org/vuln/euvd-2026-204265 EUVD-2026-204265 2026-10-06T14:02:06.300947+00:00 EUVD-2026-204265 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27186 fkie_cve-2024-27186 2026-10-06T14:02:06.300973+00:00

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.

 https://cve.radiocsirt.org/vuln/ghsa-2mh3-x6j9-j554 GHSA-2mh3-x6j9-j554 2026-10-06T14:02:06.301009+00:00

The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.

 https://cve.radiocsirt.org/vuln/gsd-2024-27186 gsd-2024-27186 2026-10-06T14:02:06.301044+00:00 gsd-2024-27186 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1891 WID-SEC-W-2024-1891 — Joomla: Mehrere Schwachstellen 2026-10-06T14:02:06.301066+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Joomla ausnutzen, um falsche Informationen darzustellen, einen Cross-Site-Scripting-Angriff zu starten und Daten zu verändern.