Description An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media. Remediation References CVE-2022-23801 Related Vulnerabilities PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-39527) PHP Improper Input Validation Vulnerability (CVE-2016-3185) WordPress Plugin betterAmazonAPI Cross-Site Scripting (1.2) WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.7.0) WordPress Plugin WP-Matomo (WP-Piwik) Cross-Site Scripting (1.0.4) Severity Medium Classification CVE-2022-23801 CWE-707 Tags Missing Update Known Vulnerabilities