Skip to content

CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-48953

Joomla! Core - [20260707] - XSS in the generic image output layout

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-07-07
Updated: 2026-07-08
Assigning organization: Joomla

Description

Lack of escaping leads to an XSS vulnerability in the generic image output layout.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

4.0.0-5.4.6affected
6.0.0-6.1.1affected

References

https://developer.joomla.org/security-centre/1061-20260707-core-xss-in-the-generic-image-output-layout.html ↗