Description
Joomla存在跨站脚本漏洞，此漏洞是由于administrator/index.php对用户的请求验证不当导致的。
Joomla CVE-2024-21726 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2024-21726
https://developer.joomla.org/security-centre/929-20240205-core-inadequate-content-filtering-within-the-filter-code.html
https://www.sonarsource.com/blog/joomla-multiple-xss-vulnerabilities
https://zhuanlan.zhihu.com/p/684207603
https://cn-sec.com/archives/2517266.html
https://www.tenablecloud.cn/plugins/was/114218
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-21726
https://www.tenable.com/plugins/was/114217
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-21726
https://www.invicti.com/web-application-vulnerabilities/joomla-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-cve-2024-21726