{"id":"CVE-2026-73336","title":"Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2","summary":"Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.","severity":"medium","cvss":5.1,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-79"],"vendor":"Joomla! Project","product":"Joomla! CMS","affected":["joomla_cms 5.1.0-5.4.6","joomla_cms 6.0.0-6.1.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-18T19:03:39.903798Z"},"published":"2026-08-18","updated":"2026-10-09","sourceUpdated":"2026-10-09T12:34:55.161Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-73336","references":[{"url":"https://www.joomla.org/"},{"url":"https://developer.joomla.org/security-centre/1073-20260806-core-xss-through-schema-org-outputs.html"}],"tags":["cve.org"],"epss":0.00266,"epssPercentile":0.17234,"ingestedAt":"2026-10-15T00:02:07.409Z","slug":"CVE-2026-73336","body":"## Overview\n\nJoomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.\n\n## Affected\n\n- `joomla_cms 5.1.0-5.4.6`\n- `joomla_cms 6.0.0-6.1.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":28.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}