Skip to content

CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-63082

Joomla! Core - [20260101] - Inadequate content filtering for data URLs

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-01-06
Updated: 2026-01-06
Assigning organization: Joomla

Description

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

4.0.0-5.4.1affected
6.0.0-6.0.1affected

References

https://developer.joomla.org/security-centre/1016-20260101-core-inadequate-content-filtering-for-data-urls.html ↗