ZeroDay Findings
Sign inSign up

Findings

CVE-2026-73336

[20260806] - Core - XSS through schema.org outputs

Published Aug 17, 2026 · Joomla Joomla

Project: Joomla! SubProject: CMS Impact: Moderate Severity: Moderate Probability: Low Versions: 5.1.0-5.4.7, 6.0.0-6.1.2 Exploit type: XSS Reported Date: 2026-07-21 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73336 Description Improper escaping flags lead to an XSS vector in schema.org markup outputs. Affected Installs Joomla! CMS versions 5.1.0-5.4.7, 6.0.0-6.1.2 Solution Upgrade to version 5.4.8, 6.1.3 Contact The JSST at the Joomla! Security Centre . Reported By: Amin İsayev, Geo (GitHub.com/geo-chen), Rodolfo Tavares

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 17, 2026 · Joomla Security

    Detected

    Project: Joomla! SubProject: CMS Impact: Moderate Severity: Moderate Probability: Low Versions: 5.1.0-5.4.7, 6.0.0-6.1.2 Exploit type: XSS Reported Date: 2026-07-21 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73336 Description Improper escaping flags lead to an XSS vector in schema.org markup outputs. Affected Installs Joomla! CMS versions 5.1.0-5.4.7, 6.0.0-6.1.2 Solution Upgrade to version 5.4.8

Sources

  • CVE.orgVulnerability recordCVE-2026-73336

    Official CVE identifier

    cve.org
  • Joomla SecurityVendor advisoryCVE-2026-73336

    Project: Joomla! SubProject: CMS Impact: Moderate Severity: Moderate Probability: Low Versions: 5.1.0-5.4.7, 6.0.0-6.1.2 Exploit type: XSS Reported Date: 2026-07-21 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73336 Description Improper escaping flags lead to an XSS vector in sche

    developer.joomla.org