Browse CVEs

MEDIUM 6.3 CVE-2023-23750 An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messag… Joomla\! after 4.2.6 Fix from $1,6002023-02-01 MEDIUM 6.1 CVE-2022-27914 An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabiliti… Joomla\! 4.2.5+ Fix from $1,6002022-11-08 MEDIUM 6.1 CVE-2022-27913 An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabiliti… Joomla\! after 4.2.3 Fix from $1,6002022-10-25 MEDIUM 5.3 CVE-2022-27912 An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests. Joomla\! after 4.2.3 Fix from $1,6002022-10-25 MEDIUM 5.3 CVE-2022-27911 An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing '_JEXEC or die check' caused by the PSR12 changes. Joomla\! Mitigation only Fix from $1,6002022-08-31 CRITICAL 9.8 CVE-2022-23795 An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which … Joomla\! after 4.1.0 Fix from $2,3002022-03-30 CRITICAL 9.8 CVE-2022-23797 An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted … Joomla\! after 4.1.0 Fix from $2,3002022-03-30 CRITICAL 9.8 CVE-2022-23799 An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data. Joomla\! after 4.1.0 Fix from $2,3002022-03-30 HIGH 7.5 CVE-2022-23793 An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside… Joomla\! after 4.1.0 Fix from $1,9502022-03-30 MEDIUM 6.1 CVE-2022-23796 An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields. Joomla\! after 3.10.6 Fix from $1,6002022-03-30 MEDIUM 6.1 CVE-2022-23798 An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check wheth… Joomla\! after 4.1.0 Fix from $1,6002022-03-30 MEDIUM 6.1 CVE-2022-23800 An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components. Joomla\! after 4.1.0 Fix from $1,6002022-03-30 MEDIUM 6.1 CVE-2022-23801 An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media. Joomla\! after 4.1.0 Fix from $1,6002022-03-30 MEDIUM 5.3 CVE-2022-23794 An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error… Joomla\! after 4.1.0 Fix from $1,6002022-03-30 CRITICAL 9.1 CVE-2021-26040 An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command. Joomla\! Mitigation only Fix from $2,3002021-08-24 HIGH 7.5 CVE-2021-26036 An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table. Joomla\! after 3.9.27 Fix from $1,9502021-07-07 HIGH 7.5 CVE-2021-26038 An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL checks for superusers. A def… Joomla\! after 3.9.27 Fix from $1,9502021-07-07 MEDIUM 6.1 CVE-2021-26035 An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads to a XSS vulnerability. Joomla\! after 3.9.27 Fix from $1,6002021-07-07 MEDIUM 6.1 CVE-2021-26039 An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of com_media leads to a XSS vulnerability. Joomla\! after 3.9.27 Fix from $1,6002021-07-07 MEDIUM 5.3 CVE-2021-26037 An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions when a user's password was cha… Joomla\! after 3.9.27 Fix from $1,6002021-07-07 CRITICAL 9.8 CVE-2010-1433 Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied in… Joomla\! after 1.5.15 Fix from $2,3002021-06-21 CRITICAL 9.8 CVE-2010-1435 Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subse… Joomla\! after 1.5.15 Fix from $2,3002021-06-21 HIGH 7.5 CVE-2010-1434 Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sens… Joomla\! after 1.5.15 Fix from $1,9502021-06-21 HIGH 7.5 CVE-2010-1432 Joomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in l… Joomla\! after 1.5.15 Fix from $1,9502021-06-21 MEDIUM 6.5 CVE-2021-26033 An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint. Joomla\! after 3.9.26 Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2021-26034 An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in data download endpoints in com_banners … Joomla\! after 3.9.26 Fix from $1,6002021-05-26 MEDIUM 6.1 CVE-2021-26032 An issue was discovered in Joomla! 3.0.0 through 3.9.26. HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS atta… Joomla\! after 3.9.26 Fix from $1,6002021-05-26 MEDIUM 6.1 CVE-2021-26030EPSS 82% An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on… Joomla\! after 3.9.25 Fix from $1,6002021-04-14 MEDIUM 5.3 CVE-2021-26031 An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate filters on module layout settings could lead to an LFI. Joomla\! after 3.9.25 Fix from $1,6002021-04-14 CRITICAL 9.1 CVE-2021-23127 An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 by… Joomla\! 3.9.25+ Fix from $2,3002021-03-04