| Package | Affected versions | Patched versions |
|---|---|---|
| joomla! | ≥ 1.5.0, < 5.4.8≥ 6.0.0, < 6.1.3 | 5.4.86.1.3 |
Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The cleanAttribute method removes HTML data URIs, however injected whitespaces characters could circumvent that cleanup, causing an XSS vector.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free