Description

An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads to a XSS vulnerability.

Remediation

References

CVE-2021-26035

Related Vulnerabilities

WordPress Plugin Easy Image Gallery Cross-Site Scripting (1.1.1)

WordPress Plugin WP Quick FrontEnd Editor Multiple Vulnerabilities (5.5)

Apache Tomcat Resource Management Errors Vulnerability (CVE-2012-4534)

Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3086)

PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0754)

Severity

Medium

Classification

CVE-2021-26035 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities