https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:18:25.779265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-joomla-2025-63082 BIT-joomla-2025-63082 — Joomla! Core - [20260101] - Inadequate content filtering for data URLs 2026-10-06T17:18:25.783439+00:00

Affected: Bitnami: joomla

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0008 certfr-2026-avi-0008 — De multiples vulnérabilités ont été découvertes dans Joomla!. Elles permettent à un attaquant de provoquer une injectio… 2026-10-06T17:18:25.783494+00:00 certfr-2026-avi-0008 https://cve.radiocsirt.org/vuln/euvd-2026-264959 EUVD-2026-264959 2026-10-06T17:18:25.783515+00:00 EUVD-2026-264959 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63082 fkie_cve-2025-63082 2026-10-06T17:18:25.783527+00:00

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

 https://cve.radiocsirt.org/vuln/ghsa-w359-ppwg-hrqh GHSA-w359-ppwg-hrqh 2026-10-06T17:18:25.783547+00:00

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000025 jvndb-2026-000025 2026-10-06T17:18:25.783560+00:00

Joomla! CMS provided by Joomla! Project contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2025-63082' target='_blank'></a><ul><li>Cross-site scripting (CWE-79) - CVE-2025-63082</li></ul>Sho Sugiyama of SUZUKI MOTOR CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0028 WID-SEC-W-2026-0028 — Joomla: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-06T17:18:25.783580+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Joomla ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.