joomla vulnerabilities (Bitnami)
160 vulnerabilities.
joomlaBitnamiJoomla! Core - [20260518] - Transport encryption downgrade for password and username reset links9.8 CriticaljoomlaBitnamiJoomla! Core - [20260508] - Improper access check in com_config webservice endpoints8.6 HighjoomlaBitnamiJoomla! Core - [20260501] - XSS in feed modules6.9 MediumjoomlaBitnamiJoomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints8.2 HighjoomlaBitnamiJoomla! Core - [20260504] - XSS in readmore links6.9 MediumjoomlaBitnamiJoomla! Core - [20260513] - Privilege escalation through com_users batch task8.2 HighjoomlaBitnamiJoomla! Core - [20260503] - XSS in com_contenthistory6.9 MediumjoomlaBitnamiJoomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objects7.5 HighjoomlaBitnamiJoomla! Core - [20260302] - SQL injection in com_content articles webservice endpoint6.9 MediumjoomlaBitnamiJoomla! Core - [20260305] - Arbitrary file deletion in com_joomlaupdate8.6 HighjoomlaBitnamiJoomla! Core - [20260301] - ACL hardening in com_ajax6.3 MediumjoomlaBitnamiJoomla! Core - [20260306] - Improper access check in webservice endpoints8.6 HighjoomlaBitnamiJoomla! Core - [20260303] - XSS vector in com_associations comparison view5.9 MediumjoomlaBitnamiJoomla! Core - [20260304] - XSS vectors in various article title outputs5.9 MediumjoomlaBitnamiJoomla! Core - [20260101] - Inadequate content filtering for data URLs5.9 MediumjoomlaBitnamiJoomla! Core - [20260102] - XSS vector in the pagebreak plugin5.9 MediumjoomlaBitnami[20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package9.8 CriticaljoomlaBitnami[20250402] - Joomla Core - MFA Authentication Bypass7.5 HighjoomlaBitnami[20250103] - Core - Read ACL violation in multiple core views7.5 HighjoomlaBitnami[20250101] - Core - XSS vectors in module chromes6.1 MediumjoomlaBitnami[20250102] - Core - XSS vector in the id attribute of menu lists7.5 HighjoomlaBitnami[20240802] - Core - Cache Poisoning in Pagination9.1 CriticaljoomlaBitnami[20240803] - Core - XSS in HTML Mail Templates6.1 MediumjoomlaBitnami[20240801] - Core - Inadequate validation of internal URLs6.1 MediumjoomlaBitnami[20240805] - Core - XSS vectors in Outputfilter::strip* methods6.1 MediumjoomlaBitnami[20240804] - Core - Improper ACL for backend profile view7.5 HighjoomlaBitnami[20240701] - Core - XSS in accessible media selection field6.1 MediumjoomlaBitnami[20240702] - Core - Self-XSS in fancyselect list field layout5.4 MediumjoomlaBitnami[20240704] - Core - XSS in Wrapper extensions6.1 MediumjoomlaBitnami[20240705] - Core - XSS in com_fields default field value6.1 MediumjoomlaBitnami[20240703] - Core - XSS in StringHelper::truncate method6.1 MediumjoomlaBitnami[20240202] - Core - Open redirect in installation application4.3 MediumjoomlaBitnami[20240204] - Core - XSS in mail address outputs6.1 MediumjoomlaBitnami[20240203] - Core - XSS in media selection fields6.1 MediumjoomlaBitnami[20240201] - Core - Insufficient session expiration in MFA management views6.3 MediumjoomlaBitnami[20240205] - Core - Inadequate content filtering within the filter code6.5 MediumjoomlaBitnami[20231101] - Core - Exposure of environment variables7.5 HighjoomlaBitnami[20230501] - Core - Open Redirect and XSS within the mfa select6.1 MediumjoomlaBitnami[20230502] - Core - Bruteforce prevention within the mfa screen7.5 HighjoomlaBitnami[20230201] - Core - Improper access check in webservice endpoints5.3 MediumjoomlaBitnami[20230102] - Core - Missing ACL checks for com_actionlogs4.3 MediumjoomlaBitnami[20230101] - Core - CSRF within post-installation messages6.3 MediumjoomlaBitnami[20221101] - Core - RXSS through reflection of user input in com_media6.1 MediumjoomlaBitnami[20221002] - Core - RXSS through reflection of user input in headings6.1 MediumjoomlaBitnami[20221001] - Core - Debug Mode leaks full request payloads including passwords5.3 MediumjoomlaBitnami[20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'5.3 MediumjoomlaBitnami[20220309] - Core - XSS attack vector through SVG6.1 MediumjoomlaBitnami[20220308] - Core - Inadequate content filtering within the filter code6.1 MediumjoomlaBitnami[20220307] - Core - Variable Tampering on JInput $_REQUEST data9.8 CriticaljoomlaBitnami[20220306] - Core - Inadequate validation of internal URLs6.1 Medium- Show moreLoading…