Security
Loading…

CVE-2026-90918

UNKNOWN
View on NVD← Back to search
Description

Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.

Timeline
Published:September 29th, 2026 5:17 PM
Last modified:September 30th, 2026 4:19 PM
CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)
CWE-79
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute