Rapid7

vulnerability

Joomla!: [20240203] - Core - XSS in media selection fields (CVE-2024-21724)

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Jan 10, 2023
Added
Feb 21, 2024
Modified
Mar 30, 2026

Description

Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.

Solutions

joomla-upgrade-3_10_15joomla-upgrade-4_4_3joomla-upgrade-5_0_3
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.