title: [20210401] - Core - Escape xss in logo parameter error pages
description: An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page
problem types: XSS
affected:
{
product: Joomla! CMS
vendor: Joomla! Project
versions:
status: affected, version: 3.0.0-3.9.25
}