Cross-Site Scripting Vulnerability in Joomla Article Titles by Joomla

CVE-2026-21632

What is CVE-2026-21632?

A cross-site scripting vulnerability exists due to inadequate output escaping for article titles in Joomla. This oversight can be exploited in multiple output locations, enabling attackers to inject malicious scripts that execute in the context of the user's browser. If exploited, this could lead to unauthorized actions taken on behalf of the user, data theft, or website defacement. It is vital for Joomla users to apply appropriate security measures to mitigate this vulnerability.

References