Skip to content

CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-23796

[20220304] - Core - Missing input validation within com_fields class inputs

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-03-30
Updated: 2026-02-25
Assigning organization: Joomla

Description

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

3.7.0-3.10.6affected

References

https://developer.joomla.org/security-centre/873-20220304-core-missing-input-validation-within-com-fields-class-inputs.html ↗