Vulnerability · Published Apr 9, 2026 · Assigned by VulnCheck

CVE-2023-54363Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters

Medium 6.1

In plain English

A medium-severity cross-site scripting in Joomla Solidres from Solidres. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.2%top 85.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multiple GET parameters including show, reviews, type_id, distance, facilities, categories, prices, location, and Itemid. Attackers can craft malicious URLs containing JavaScript payloads in these parameters to steal session tokens, login credentials, or manipulate site content when victims visit the crafted links.

Affected products (as reported)

Vendor	Product	Versions
Solidres	Joomla Solidres	2.13.3

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

ExploitDB-51638 exploit
Official Product Homepage product
Product Reference product
VulnCheck Advisory: Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters third-party-advisory