PT-2022-16272 · Joomla · Joomla!

Sebastian Morris · Published 2022-03-30 · Updated 2025-04-03 · CVE-2022-23800

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 4.0.0 through 4.1.0

Description An issue was discovered in Joomla! due to inadequate content filtering, leading to XSS vulnerabilities in various components.

Recommendations For Joomla! versions 4.0.0 through 4.1.0, update to a version that includes the fix for the inadequate content filtering issue to prevent XSS vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-JOOMLA-2022-23800

CVE-2022-23800

GHSA-QCV6-H33G-HVRC

Affected Products

Joomla!

References · 9

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/filter/CVE-2022-23800.yaml · Exploit
• https://developer.joomla.org/security-centre/877-20220308-core-inadequate-content-filtering-within-the-filter-code.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23800 · Security Note
• https://osv.dev/vulnerability/BIT-joomla-2022-23800 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23800 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qcv6-h33g-hvrc · Vendor Advisory
• https://github.com/joomla-framework/filter · Note
• https://t.me/cvenotify/28451 · Telegram Post
• https://t.me/cibsecurity/39854 · Telegram Post