The vulnerability is a lack of output escaping in the content history component, allowing arbitrary scripts to be injected and executed in the victim's browser when the page is viewed. This type of flaw is categorized as a CWE‑79 Client‑Side Scripting Vulnerability.

The affected product is the Joomla! CMS from the Joomla! Project. No specific affected version numbers are provided in the CVE data, which means any deployed Joomla! CMS installation could be susceptible until the vendor releases a fix. Administrators and users who have access to the com_contenthistory component are potentially impacted.

The CVSS base score of 6.9 indicates limited but serious risk. EPSS data is not available, and the vulnerability is not listed in CISA KEV, suggesting no widely documented exploitation activity at present. The likely attack vector is through the web interface of the content history component, with exploitation requiring a victim to view a page containing the injected script. Attack feasibility is moderate, relying on user interaction and the presence of the vulnerable component.