JF
Product
Joomla! Framework Filter package
by Joomla! Project · last CVE Sep 29, 2026
4
CVEs
0
On KEV
6.7
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch

Add Joomla! Framework Filter package to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92231
6.7
0%
Sep 29
Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3
Affected: 1.0.0-3.0.6; 4.0.0-4.1.0
CVE-2026-92232
6.5
0%
Sep 29
Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3
Affected: 1.0.0-3.0.6; 4.0.0-4.1.0
CVE-2026-48903
6.1
0%
May 26
Joomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.
Affected: 1.0.0-3.0.5; 4.0.0-4.0.1
CVE-2026-48905
6.1
0%
May 26
Joomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.
Affected: 1.0.0-3.0.5; 4.0.0-4.0.1
Showing 4