CVE-2023-54360 MEDIUM

CVE-2023-54360: Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter

Vendor Jlexart
Product Joomla JLex Review
Weakness CWE-79 · XSS
Published April 9, 2026
Last update May 24, 2026

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

Description

Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enabling session hijacking or credential theft.

Key dates

Disclosure timeline

April 9, 2026 CVE published
May 24, 2026 Record updated