Cross-Site Scripting Vulnerability in Joomla! Content History Component

CVE-2026-30894

What is CVE-2026-30894?

The Joomla! Content History Component is vulnerable to Cross-Site Scripting due to inadequate escaping of output. This flaw allows attackers to inject malicious scripts, which can be executed in the browser of users viewing the content history. By exploiting this vulnerability, an attacker can potentially manipulate user sessions or redirect users to malicious websites. It's crucial for users and administrators to apply the latest security patches and implement best practices for web security to mitigate these risks.

References