XSS Vulnerability in Joomla's Multilingual Associations Component

CVE-2026-25901

What is CVE-2026-25901?

A cross-site scripting (XSS) vulnerability has been identified in the multilingual associations component of Joomla. This issue arises from inadequate output escaping, allowing attackers to inject malicious scripts into the web application. Exploitation of this vulnerability could result in unauthorized access, data theft, or session hijacking. Website administrators are urged to assess their installations and apply appropriate security measures as detailed in the vendor advisory.

References