Joomla CVE-2025-63082

MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-01-06 security@joomla.org

6.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

2

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 06, 2026 - 17:15 nvd

MEDIUM 6.1

DescriptionCVE.org

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

AnalysisAI

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags. [CVSS 6.1 MEDIUM]

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). Affects Joomla\!. Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.

More in Joomla

View all

CVE-2017-8917 CRITICAL Act Now POC

SQL injection vulnerability in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable,

CVE-2016-10045 CRITICAL Act Now POC

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

CVE-2015-8562 HIGH Act Now POC

Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public explo

CVE-2015-7297 HIGH Act Now POC

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2016-8869 CRITICAL Act Now POC

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated

CVE-2016-8870 HIGH Act Now POC

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated

CVE-2015-7857 HIGH Act Now POC

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.p

CVE-2015-7858 HIGH Act Now POC

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2013-5576 MEDIUM This Month POC

administrator/components/com_media/helpers/media.php in the media manager in Joomla!. Rated medium severity (CVSS 6.8),

CVE-2014-7228 HIGH Act Now POC

Akeeba Restore (restore.php), as used in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploit

CVE-2014-7981 HIGH Act Now POC

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2017-14596 CRITICAL Act Now POC

In Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required,

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2020-3580 MEDIUM POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2016-8581 MEDIUM POC

CVE-2013-5223 MEDIUM POC

CVE-2025-52367 MEDIUM POC

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

CVE-2020-3580 MEDIUM POC

CVE-2013-1710 CRITICAL POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2024-52875 HIGH POC

Share

CVE-2025-63082 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy