Skip to contentJoomla! Project Framework vulnerabilities
- joomla joomla\!, joomla! project cms, framework filter package +2 moreJoomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3CVE-2026-92231Fix available7.1 High
- joomla joomla\!, joomla! project cms, framework filter package +2 moreJoomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3CVE-2026-92232Fix available7.1 High
- joomla joomla\!, joomla! project cms, framework filesystem package +2 moreJoomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2CVE-2026-73373Public exploitFix available8.9 High
- joomla joomla\!, joomla! project framework filter package +1 moreJoomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.CVE-2026-48903Fix available6.9 Medium
- joomla joomla\!, joomla! project framework filter package +1 moreJoomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.CVE-2026-48905Fix available6.9 Medium
- joomla! project framework, joomla joomla\! +1 more[20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database packageCVE-2025-25226Fix available9.8 Critical