Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Lack of output escaping for article titles leads to XSS vectors in various locations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-01 | 1 | Disclosure1 |
| 2026-04-03 | 1 | Patch1 |
CVE-2026-21629 CVE-2026-21630 CVE-2026-21631 CVE-2026-21632 CVE-2026-23898 CVE-2026-23899 Joomla 6.0.4 & 5.4.4 Security & Bugfix Release https://www.joomla.org/announcements/release-news/5944-joomla-6-0-4-5-4-4-security-bugfix-release.html
Post summary
The Joomla 6.0.4 and 5.4.4 Security & Bugfix Release addresses the listed CVEs, providing official remediation updates.
CVE-2026-21632 Lack of output escaping for article titles leads to XSS vectors in various locations. https://www.cve.org/CVERecord?id=CVE-2026-21632
Post summary
The post announces CVE‑2026‑21632 as an XSS vulnerability caused by missing output escaping for article titles.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | joomla | joomla\! | - | - | - |