CVE-2026-48940:詳細資料

CVE-2026-48940

3.4
/
低危
2026-06-25
16h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-25
22h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field contains a raw `