CVE-2026-48940:详情

CVE-2026-48940

3.4
/
低危
2026-06-25
16h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-25
22h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field contains a raw `