CVE-2022-23800
1 advisory.
Packagist/joomla/filter CVE-2022-23800: medium 6.1
Cross-site Scripting (XSS) within joomla/filter class
Action: Upgrade joomla/filter to 1.4.4 or later.
composer require joomla/filter:1.4.4composer require joomla/filter:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.4 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.4.4 | 2.0.1 |
Sources
- osv: GHSA-qcv6-h33g-hvrc
- https://nvd.nist.gov/vuln/detail/CVE-2022-23800
- https://developer.joomla.org/security-centre/877-20220308-core-inadequate-content-filtering-within-the-filter-code.html
- https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/filter/CVE-2022-23800.yaml
- https://github.com/joomla-framework/filter
CVE-2022-23800 · published · modified · JSON