CNNVD-202601-1005 Information

CNNVD ID

CNNVD-202601-1005

CVE-2025-63083

  • CNNVD Published: 2026-01-06

Description (Chinese)

Joomla! CMS是Joomla!开源的一个内容管理系统。 Joomla! CMS存在跨站脚本漏洞,该漏洞源于输出转义不足,可能导致pagebreak插件存在跨站脚本攻击向量。

Description (English)

CMS is an open-source content management system. The CMS has a cross-site script loophole, which stems from inadequate output transposition, which may lead to a cross-stop script attack vector for the pagebreak plugin.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Joomla!

Published

2026-01-06

Last Modified

2026-02-24

References

https://developer.joomla.org/security-centre/1017-20260102-core-xss-vector-in-the-pagebreak-plugin.html https://access.redhat.com/security/cve/cve-2025-63083

Patch

https://developer.joomla.org/cms/downloads.html

Share on: