CVE-2026-30894
Lack of output escaping leads to a XSS vector in the content history component.
Published May 26, 2026 · updated Jul 24, 2026 · joomla joomla!
Lack of output escaping leads to a XSS vector in the content history component.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 26, 2026 · NIST NVD
Detected
Lack of output escaping leads to a XSS vector in the content history component.
Jul 24, 2026 · NIST NVD
Updated
Lack of output escaping leads to a XSS vector in the content history component.
Affected
- cpe joomla/joomla!version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-30894
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-30894
Lack of output escaping leads to a XSS vector in the content history component.
nvd.nist.gov