Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-54476

Fixed upstream EPSS <1%CVSS 4.8

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.

Published 2025-09-30 · CVE record · OSV

Products: Joomla! Project Joomla! CMS

Fixed upstream

EcosystemPackageFixed in
Packagistjoomla/filter4.0.1
Packagistjoomla/filter3.0.5
Packagistjoomla/filter2.0.6