p PatchFirst

CVE-2025-54476

CVE-2025-54476 · Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.

CVSS 4.8 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • joomla! cms

    Versions
    • 3.0.0-3.10.20: Affected
    • 4.0.0-4.4.13: Affected
    • 5.0.0-5.3.3: Affected

    No fix published

  • joomla/filter Packagist

    Versions
    • 4.0.0
    Affected ranges
    • ECOSYSTEM: ≥ 4.0.0, < 4.0.1

    Update to 4.0.1

  • joomla/filter Packagist

    Versions
    • 3.0.0
    • 3.0.1
    • 3.0.2
    • 3.0.3
    • 3.0.4
    Affected ranges
    • ECOSYSTEM: ≥ 3.0.0, < 3.0.5

    Update to 3.0.5

  • joomla/filter Packagist

    Versions
    • 1.0
    • 1.0-alpha
    • 1.0-beta
    • 1.0-beta2
    • 1.0-beta3
    • 1.1.0
    • 1.1.1
    • 1.1.2
    • 1.1.3
    • 1.1.4
    • 1.1.5
    • 1.1.6
    • 1.2.0
    • 1.3.0
    • 1.3.1
    • 1.3.2
    • 1.3.3
    • 1.3.4
    • 1.3.5
    • 1.4.0
    • 1.4.1
    • 1.4.2
    • 1.4.3
    • 1.4.4
    • 1.4.5
    • 1.4.6
    • 1.4.7
    • 2.0.0
    • 2.0.0-beta
    • 2.0.0-beta2
    • 2.0.0-beta3
    • 2.0.0-beta4
    • 2.0.0-beta5
    • 2.0.0-rc
    • 2.0.1
    • 2.0.2
    • 2.0.3
    • 2.0.4
    • 2.0.5
    Affected ranges
    • ECOSYSTEM: < 2.0.6

    Update to 2.0.6

Original sources

Check your server →