CVE-2026-92232 – Joomla! Core – [20260916] – Core – XSS filter bypass in InputFilter via whitespace charact

Joomla! Core – [20260916] – Core – XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 – The cleanAttribute method removes HTML data URIs, however injected whitespaces characters could circumvent that cleanup, causing an XSS vector.