CVE-2025-63082: Joomla! Core - [20260101] - Inadequate content filtering for data URLs
Published Jan 6, 2026
·Updated
Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.
Affected Software
3 affected components
Joomla Joomla! Core
Joomla Joomla\!>=4.0.0<5.4.2
Joomla Joomla\!>=6.0.0<6.0.2
Event History
Jan 6, 2026
CVE Published
via MITRE·04:01 PM
Data Sourced
via MITRE·04:01 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63082?
CVE-2025-63082 has been rated as a medium severity vulnerability due to its potential for XSS attacks.
2
How do I fix CVE-2025-63082?
To fix CVE-2025-63082, ensure that input filtering is properly implemented for data URLs in img tags in Joomla! Core.
3
What versions of Joomla! are affected by CVE-2025-63082?
CVE-2025-63082 affects specific versions of the Joomla! Core that lack adequate input filtering.
4
What type of vulnerability is CVE-2025-63082?
CVE-2025-63082 is an XSS (Cross-Site Scripting) vulnerability resulting from insufficient input filtering.
5
What are the potential impacts of CVE-2025-63082?
The potential impacts of CVE-2025-63082 include unauthorized script execution in the user's browser, which can lead to data theft or site compromise.