CVE-2022-23796: 
Joomla vulnerability analysis and mitigation

An input validation vulnerability (CVE-2022-23796) was discovered in Joomla! versions 3.7.0 through 3.10.6. The vulnerability, reported on May 6, 2021 and fixed on March 29, 2022, stems from missing input validation within the com_fields class inputs component, which could potentially allow XSS (Cross-Site Scripting) attacks (Joomla Security).

The vulnerability is classified as moderate impact with low severity and probability. It affects the com_fields component of Joomla! CMS and is specifically related to insufficient input validation that could lead to XSS attacks. The vulnerability has been assigned a CVSS v3.1 score of 9.8 (CRITICAL) (NVD).

The vulnerability could allow attackers to perform XSS (Cross-Site Scripting) attacks through the com_fields component, potentially compromising the security of affected Joomla! installations (Joomla Security).

The vulnerability requires an attacker to exploit the missing input validation in the com_fields class inputs. The probability of exploitation is rated as low according to the official security advisory (Joomla Security).

The vulnerability has been fixed in Joomla! version 3.10.7. Users of affected versions are advised to upgrade to this version or later to mitigate the security risk (Joomla Security).