Joomla CVE-2025-63083

MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-01-06 security@joomla.org

6.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

2

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 06, 2026 - 17:15 nvd

MEDIUM 6.1

DescriptionCVE.org

Lack of output escaping leads to a XSS vector in the pagebreak plugin.

AnalysisAI

Lack of output escaping leads to a XSS vector in the pagebreak plugin. [CVSS 6.1 MEDIUM]

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). Affects Joomla\!. Lack of output escaping leads to a XSS vector in the pagebreak plugin.

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.

More in Joomla

View all

CVE-2016-10033 CRITICAL Act Now POC

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para

CVE-2017-8917 CRITICAL Act Now POC

SQL injection vulnerability in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable,

CVE-2016-10045 CRITICAL Act Now POC

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

CVE-2015-8562 HIGH Act Now POC

Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public explo

CVE-2015-7297 HIGH Act Now POC

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2016-8869 CRITICAL Act Now POC

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated

CVE-2016-8870 HIGH Act Now POC

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated

CVE-2015-7857 HIGH Act Now POC

SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.p

CVE-2015-7858 HIGH Act Now POC

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

CVE-2013-5576 MEDIUM This Month POC

administrator/components/com_media/helpers/media.php in the media manager in Joomla!. Rated medium severity (CVSS 6.8),

CVE-2014-7228 HIGH Act Now POC

Akeeba Restore (restore.php), as used in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploit

CVE-2014-7981 HIGH Act Now POC

SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2020-3580 MEDIUM POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2016-8581 MEDIUM POC

CVE-2013-5223 MEDIUM POC

CVE-2025-52367 MEDIUM POC

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

CVE-2020-3580 MEDIUM POC

CVE-2013-1710 CRITICAL POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2024-52875 HIGH POC

Share

CVE-2025-63083 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy