CVE-2026-73336

MediumCVSS 5.1

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

Joomla! Core has an XSS vulnerability through schema.org outputs. Improper escaping flags lead to an XSS vector in schema.org markup outputs.

Risk Assessment

An attacker can execute malicious script in a user's browser, potentially leading to session theft, account takeover, or other attacks.

Recommendation

Update Joomla! to a version where escaping in schema.org outputs is fixed.

Original NVD description (English source)

Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.