Packagist/joomla/filter CVE-2025-54476: medium, EPSS 0.31%
Joomla! CMS vulnerable to XSS via the input filter
Action: Upgrade joomla/filter to 2.0.6 or later.
composer require joomla/filter:4.0.1composer require joomla/filter:3.0.5composer require joomla/filter:2.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.1 | - |
| 3.0.0 | 3.0.5 | - |
| 0 | 2.0.6 | - |
Fixed versions
| 4.0.1 | 3.0.5 | 2.0.6 |
Sources
- osv: GHSA-fm22-g2q9-j3pw
- https://nvd.nist.gov/vuln/detail/CVE-2025-54476
- https://github.com/joomla-framework/filter/commit/188dd3fccd6fa0532d105a52736affdf6b166217
- https://github.com/joomla-framework/filter/commit/852c7e101c649500d3af58ffb8baf15d7c86d825
- https://github.com/joomla-framework/filter/commit/fcde280785f188e93530f7da68102f7dd8f9f723
- https://developer.joomla.org/security-centre/1010-20250901-core-inadequate-content-filtering-within-the-checkattribute-filter-code.html
- https://github.com/joomla/joomla-cms
CVE-2025-54476 · published · modified · JSON