{"id":"GHSA-qcv6-h33g-hvrc","aliases":["BIT-joomla-2022-23800","CVE-2022-23800"],"title":"Cross-site Scripting (XSS) within joomla/filter class","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.","severity":"medium","score":6.1,"published":"2022-03-31T00:00:15.000Z","modified":"2025-04-03T15:26:54.785Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"joomla/filter","sources":[{"name":"OSV · GHSA-qcv6-h33g-hvrc","url":"https://osv.dev/vulnerability/GHSA-qcv6-h33g-hvrc"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.4.4"}],"type":"ECOSYSTEM"}],"versions":["1.0","1.0-alpha","1.0-beta","1.0-beta2","1.0-beta3","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.4.0","1.4.1","1.4.2","1.4.3"],"fixed":["1.4.4"]},{"ecosystem":"Packagist","name":"joomla/filter","sources":[{"name":"OSV · GHSA-qcv6-h33g-hvrc","url":"https://osv.dev/vulnerability/GHSA-qcv6-h33g-hvrc"}],"ranges":[{"events":[{"introduced":"2.0.0"},{"fixed":"2.0.1"}],"type":"ECOSYSTEM"}],"versions":["2.0.0"],"fixed":["2.0.1"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-23800","https://developer.joomla.org/security-centre/877-20220308-core-inadequate-content-filtering-within-the-filter-code.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/filter/CVE-2022-23800.yaml","https://github.com/joomla-framework/filter"],"sources":[{"name":"OSV","id":"GHSA-qcv6-h33g-hvrc","modified":"2025-04-03T15:26:54.785831Z","url":"https://osv.dev/vulnerability/GHSA-qcv6-h33g-hvrc"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:15:31.530Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}