CVE-2026-92224: Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Published Sep 29, 2026
·Updated
Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector.
Affected Software
1 affected component
Joomla joomla>=4.0.0<=5.4.8, >=6.0.0<=6.1.3
Event History
Sep 29, 2026
CVE Published
via MITRE·04:43 PM
Data Sourced
via MITRE·04:43 PM
DescriptionWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Joomla versions are affected?
Affected versions are Joomla 4.0.0 through 5.4.8 and Joomla 6.0.0 through 6.1.3.
2
What is required to exploit this issue?
The issue is an XSS vector caused by inputs in the link toolbar layout not being properly escaped. The provided information does not specify the permissions, user interaction, or input path required for exploitation.