CVE-2026-21632
Lack of output escaping for article titles leads to XSS vectors in various locations.
Published Apr 1, 2026 · updated Jun 17, 2026 · joomla joomla!
Lack of output escaping for article titles leads to XSS vectors in various locations.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 1, 2026 · NIST NVD
Detected
Lack of output escaping for article titles leads to XSS vectors in various locations.
Jun 17, 2026 · NIST NVD
Updated
Lack of output escaping for article titles leads to XSS vectors in various locations.
Affected
- cpe joomla/joomla!version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-21632
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-21632
Lack of output escaping for article titles leads to XSS vectors in various locations.
nvd.nist.gov