Improper Input Handling in Joomla's Input Filter Framework
CVE-2025-54476

4.8MEDIUM

Key Information:

Vendor

Joomla
Status
Joomla! Cms
Vendor
CVE Published:
30 September 2025

What is CVE-2025-54476?

The Joomla Input Filter Framework has a vulnerability that arises from improper handling of user inputs in the checkAttribute method. This flaw can be exploited to inject malicious scripts, leading to potential cross-site scripting (XSS) attacks that compromise user sessions and data integrity. Developers should take immediate action to remediate this issue to protect their applications from unauthorized access and data breaches.

Affected Version(s)

Joomla! CMS 3.0.0-3.10.20

Joomla! CMS 4.0.0-4.4.13

Joomla! CMS 5.0.0-5.3.3

References

https://developer.joomla.org/security-centre/1010-2025090...
vendor-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Flydragon, Poi, Cwy, Xtrimi
JSON
.
CVE-2025-54476 : Improper Input Handling in Joomla's Input Filter Framework