Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-23124

No fix known EPSS 79%

An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.

Published 2021-01-12 · CVE record · OSV