Cross-Site Scripting Vulnerability in Joomla's Menu List ID Attribute
CVE-2024-40748

Currently unrated

Key Information:

Vendor
Joomla
Vendor
CVE Published:
7 January 2025

Summary

A vulnerability exists in the Joomla content management system due to insufficient output escaping in the id attribute of menu lists. This flaw can be exploited to inject malicious scripts, potentially allowing attackers to execute arbitrary JavaScript in the context of the affected website. Website administrators should take immediate action to secure their systems by ensuring output is properly handled to mitigate XSS risks.

References

https://developer.joomla.org/security-centre/955-20250102...

Timeline

  • Vulnerability published

.