CVE-2026-73336

Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.

Score

CVSS 3.1 6.4 Medium

Status

Analyzed - security@joomla.org

Published

2026-08-18

Last modified

2026-10-22

Weaknesses

CWE-79

Affected products

• Joomla! (Joomla)
• Joomla Cms (Joomla Project)

References

• https://www.joomla.org/
• https://developer.joomla.org/security-centre/1073-20260806-core-xss-through-schema-org-outputs.html