ZeroDay Findings
Sign inSign up

Findings

CVE-2026-48905

Lack of input filtering leads to an XSS vector in the HTML filter code.

Published May 26, 2026 · updated Jul 20, 2026 · joomla joomla!

Lack of input filtering leads to an XSS vector in the HTML filter code.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    Lack of input filtering leads to an XSS vector in the HTML filter code.

  2. Jul 20, 2026 · NIST NVD

    Updated

    Lack of input filtering leads to an XSS vector in the HTML filter code.

Affected

  • cpe joomla/joomla!version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-48905

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-48905

    Lack of input filtering leads to an XSS vector in the HTML filter code.

    nvd.nist.gov

References