VULNERABILITY INTELLIGENCE

CVE-2021-23124

CVSS score6.1 MEDIUM

EPSS probability78.96%

CISA KEVNot currently listed

Published2021-01-12

Last modified2026-06-17

Description

An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.