Vulnerability · Published Apr 9, 2026 · Assigned by VulnCheck
CVE-2023-54360Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter
Medium 6.1
In plain English
A medium-severity cross-site scripting in Joomla JLex Review from Jlexart. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.2%top 89.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter. Attackers can craft malicious links containing JavaScript payloads that execute in victims' browsers when clicked, enabling session hijacking or credential theft.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Jlexart | Joomla JLex Review | 6.0.1 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References
- ExploitDB-51645 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Joomla JLex Review 6.0.1 Reflected XSS via review_id Parameter third-party-advisory