PT-2021-15385 · Joomla · Joomla!

Bui Duc Anh Khoa · Published 2021-03-04 · Updated 2025-04-03 · CVE-2021-23130

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.0 through 3.9.24

Description An issue was discovered that could lead to XSS issues due to missing filtering of feed fields.

Recommendations For Joomla! versions 2.5.0 through 3.9.24, update to a version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-JOOMLA-2021-23130

CVE-2021-23130

Affected Products

Joomla!

References · 4

• https://osv.dev/vulnerability/BIT-joomla-2021-23130 · Vendor Advisory
• https://developer.joomla.org/security-centre/844-20210304-core-xss-within-the-feed-parser-library.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23130 · Security Note