CVE-2024-40747

CVE-2024-40747: [20250101] - Core - XSS vectors in module chromes

Vendor Joomla! Project
Product Joomla! CMS
Weakness CWE-79 · XSS
Published January 7, 2025
Last update January 7, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Various module chromes didn't properly process inputs, leading to XSS vectors.

Key dates

02Disclosure timeline

January 7, 2025 CVE published
January 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-21788 HCL Connections is vulnerable to cross-site scripting (XSS) CVE-2025-23478 WordPress Photo Video Store plugin <= 21.07 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-63082 Joomla! Core - [20260101] - Inadequate content filtering for data URLs CVE-2025-39573 WordPress WP Posts Carousel plugin <= 1.3.10 - Cross Site Scripting (XSS) Vulnerability CVE-2023-24006 WordPress WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Plugin <= 2.6.0 is vulnerable to Cross Site Scripting (XSS)