CVE-2026-92224
[20260911] - Core - XSS in link toolbar layout
Published Sep 25, 2026 · Joomla Joomla
Project: Joomla! SubProject: CMS Impact: Moderate Severity: Moderate Probability: Low Versions: 4.0.0-5.4.8,6.0.0-6.1.3 Exploit type: XSS Reported Date: 2026-09-10 Fixed Date: 2026-09-25 CVE Number: CVE-2026-92224 Description The link toolbar layout did not properly escape inputs, leading to an XSS vector. Affected Installs Joomla! CMS versions 4.0.0-5.4.8, 6.0.0-6.1.3 Solution Upgrade to version 5.4.9, 6.1.4 Contact The JSST at the Joomla! Security Centre . Reported By: Google and Ada Logics
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Sep 25, 2026 · Joomla Security
Detected
Project: Joomla! SubProject: CMS Impact: Moderate Severity: Moderate Probability: Low Versions: 4.0.0-5.4.8,6.0.0-6.1.3 Exploit type: XSS Reported Date: 2026-09-10 Fixed Date: 2026-09-25 CVE Number: CVE-2026-92224 Description The link toolbar layout did not properly escape inputs, leading to an XSS vector. Affected Installs Joomla! CMS versions 4.0.0-5.4.8, 6.0.0-6.1.3 Solution Upgrade to version
Sources
- CVE.orgVulnerability recordCVE-2026-92224
Official CVE identifier
cve.org - Joomla SecurityVendor advisoryCVE-2026-92224
Project: Joomla! SubProject: CMS Impact: Moderate Severity: Moderate Probability: Low Versions: 4.0.0-5.4.8,6.0.0-6.1.3 Exploit type: XSS Reported Date: 2026-09-10 Fixed Date: 2026-09-25 CVE Number: CVE-2026-92224 Description The link toolbar layout did not properly escape inputs
developer.joomla.org