CVE-2023-23754 Vulnerability Details

  /     /     /  

CVE-2023-23754 Metadata Quick Info

CVE Published: 30/05/2023 | CVE Updated: 04/08/2024 | CVE Year: 2023
Source: Joomla | Vendor: Joomla! Project | Product: Joomla! CMS
Status : PUBLISHED

---

CVE-2023-23754 Description

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: XSS
Source: Joomla! Project

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).