Joomla Improper Input Validation Vulnerability (CVE-2023-23754)

Description

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

Remediation

References

CVE-2023-23754

Related Vulnerabilities

Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.2.4)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-28467)

WordPress Plugin NextGEN Gallery Sell Photo Cross-Site Scripting (1.0.4)

Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.3.8)

MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-30156)

Severity

Medium

Classification

CVE-2023-23754 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N