Joomla! Project Joomla! Framework Filter package

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-922311.0.0-3.0.6 ; 4.0.0-4.1.0Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3HIGH 7.10.3 %
CVE-2026-922321.0.0-3.0.6 ; 4.0.0-4.1.0Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.…HIGH 7.10.2 %
CVE-2026-489031.0.0-3.0.5 ; 4.0.0-4.0.1Joomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.MEDIUM 6.90.1 %
CVE-2026-489051.0.0-3.0.5 ; 4.0.0-4.0.1Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.MEDIUM 6.90.1 %