Cross-Site Scripting Vulnerability in Pagebreak Plugin by Joomla
CVE-2025-63083

5.9MEDIUM

Key Information:

Vendor

Joomla
Status
Joomla! Cms
Vendor
CVE Published:
6 January 2026

What is CVE-2025-63083?

The Pagebreak plugin for Joomla is susceptible to a Cross-Site Scripting (XSS) vulnerability due to a lack of proper output escaping. This flaw allows attackers to inject malicious scripts into web pages, posing potential risks to users and their data by enabling unauthorized access or manipulation of the website’s content.

Affected Version(s)

Joomla! CMS 3.9.0-5.4.1

Joomla! CMS 6.0.0-6.0.1

References

https://developer.joomla.org/security-centre/1017-2026010...
vendor-advisory

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

peterhulst
.