En resumen
- CVE-2025-54476 es una vulnerabilidad MEDIO (CVSS 4.8) que afecta a joomla/filter.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.31%, mayor que el 24.4% de las vulnerabilidades.
- Solución: actualizar a 3.0.5, 4.0.1, 2.0.6 o posterior.
| Package | Affected versions | Patched versions |
|---|
| joomla/filter Packagist | ≥ 3.0.0, < 3.0.5≥ 4.0.0, < 4.0.1< 2.0.6
| 3.0.54.0.12.0.6
|
Description
Improper handling of input could lead to a cross-site scripting (XSS) vector in the checkAttribute method of the input filter framework class.
NVD description
Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free