Description

An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.

Remediation

References

CVE-2022-23796

Related Vulnerabilities

Atlassian Jira Missing Authorization Vulnerability (CVE-2019-15013)

WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.136.3)

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3579)

Jenkins Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') Vulnerability (CVE-2016-9299)

WordPress Plugin BePro Listings Arbitrary File Upload (2.2.0020)

Severity

Medium

Classification

CVE-2022-23796 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities