Joomla!: [20250102] - Core - XSS vector in the id attribute of menu lists (CVE-2024-40748)

Joomla!: [20250102] - Core - XSS vector in the id attribute of menu lists (CVE-2024-40748)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

01/08/2025

Created

01/09/2025

Added

01/08/2025

Modified

01/09/2025

Description

Lack of output escaping in the id attribute of menu lists.

Solution(s)

• joomla-upgrade-3_10_20
• joomla-upgrade-4_4_10
• joomla-upgrade-5_2_3

References

• https://attackerkb.com/topics/cve-2024-40748
• CVE - 2024-40748
• http://developer.joomla.org/security-centre/955-20250102-core-xss-vector-in-the-id-attribute-of-menu-lists.html