CVE-2026-65882

The Joomdle extension for Joomla versions prior to 3.1.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the "goto" URL parameter in the Moodle wrapper endpoint. This vulnerability could allow attackers to execute arbitrary scripts in the context of the user's session, potentially leading to session hijacking or data theft. Joomla administrators using affected versions should prioritize patching to mitigate the risk of exploitation.