PT-2021-15384 · Joomla · Joomla!

Bui Duc Anh Khoa · Published 2021-03-04 · Updated 2025-04-03 · CVE-2021-23129

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.0 through 3.9.24

Description An issue was discovered that could lead to xss issues due to missing filtering of messages shown to users.

Recommendations For Joomla! versions 2.5.0 through 3.9.24, update to a version that includes the necessary filtering to prevent xss issues.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-JOOMLA-2021-23129

CVE-2021-23129

Affected Products

Joomla!

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-23129 · Security Note
• https://developer.joomla.org/security-centre/843-20210303-core-xss-within-alert-messages-showed-to-users.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23129 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-joomla-2021-23129 · Vendor Advisory