XSS in Joomla! Project Cms
CVE-2026-21632
Lack of output escaping for article titles leads to XSS vectors in various locations.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.000 (0.0th percentile) — read the EPSS interpretation.
Affected products
- Joomla! Project Cms — versions 4.0.0-5.4.3, 6.0.0-6.0.3