CVE-2026-90914

UNKNOWN

Description

Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts.

Timeline

Published:September 29th, 2026 5:17 PM

Last modified:September 30th, 2026 4:19 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-79

References & Reports

Advisories, patches, and third-party reports

https://developer.joomla.org/security-centre/1084-20260904-core-xss-in-the-generic-media-output-layouts.html
https://www.joomla.org/

Source: NIST NVD · Data may lag official sources by up to one minute