What’s Vulnerable › Vulnerabilities

CVE-2023-54363: Joomla Solidres 2.13.3 Reflected XSS via Multiple Parameters

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-09 · updated 2026-09-26
• Weakness: CWE-79

Description

Joomla Solidres 2.13.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating multiple GET parameters including show, reviews, type_id, distance, facilities, categories, prices, location, and Itemid. Attackers can craft malicious URLs containing JavaScript payloads in these parameters to steal session tokens, login credentials, or manipulate site content when victims visit the crafted links.

Affected products

• Solidres Joomla Solidres: 2.13.3

References

• http://solidres.com/
• https://extensions.joomla.org/extension/vertical-markets/booking-a-reservations/solidres/
• https://www.exploit-db.com/exploits/51638
• https://www.vulncheck.com/advisories/joomla-solidres-reflected-xss-via-multiple-parameters

Get alerted when CVE-2023-54363 or the next vulnerability affects your stack