CVE-2026-30895
Lack of output escaping leads to a XSS vector in the readmore links for com_content.
Published May 26, 2026 · updated Jul 24, 2026 · joomla joomla!
Lack of output escaping leads to a XSS vector in the readmore links for com_content.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 26, 2026 · NIST NVD
Detected
Lack of output escaping leads to a XSS vector in the readmore links for com_content.
Jul 24, 2026 · NIST NVD
Updated
Lack of output escaping leads to a XSS vector in the readmore links for com_content.
Affected
- cpe joomla/joomla!version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-30895
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-30895
Lack of output escaping leads to a XSS vector in the readmore links for com_content.
nvd.nist.gov