CVE-2024-26278

Published: Jul 9, 2024

Modified: Mar 14, 2025

PUBLISHED

The Custom Fields component not correctly filter inputs, leading to a XSS vector.

Vendor	Product	Versions
Joomla! Project	Joomla! CMS	affected `3.7.0-3.10.15` affected `4.0.0-4.4.5` affected `5.0.0-5.1.1`

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.