title: [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
description: An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks.
problem types: XSS
affected:
{
product: Joomla! CMS
vendor: Joomla! Project
versions:
status: affected, version: 3.9.0-3.9.23
}