Skip to contentJoomla Joomla\! vulnerabilities
- joomla joomla\!In Joomla! before 3.9.19, incorrect input validation of the module tag option in com_modules...CVE-2020-13762Fix available6.1 Medium
- joomla joomla\!In Joomla! before 3.9.19, the default settings of the global textfilter configuration do not...CVE-2020-13763Fix available7.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level...CVE-2020-11891Fix available5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level...CVE-2020-11889Fix available5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup...CVE-2020-11890Public exploitFix available5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL...CVE-2020-10243Fix available9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the...CVE-2020-10242Fix available6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of...CVE-2020-10241Fix available8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can...CVE-2020-10240Fix available5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype...CVE-2020-10239Public exploitFix available8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the...CVE-2020-10238Public exploitFix available7.5 High
- joomla!, joomla joomla\! +1 moreJoomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.CVE-2011-11519.1 Critical
- joomla!, joomla joomla\! +1 moreJoomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.CVE-2011-49125.3 Medium
- joomla! core, joomla joomla\! +1 moreJoomla! core 1.7.1 allows information disclosure due to weak encryptionCVE-2011-36297.5 High
- joomla!, joomla joomla\! +1 moreJoomla! 1.7.1 has core information disclosure due to inadequate error checking.CVE-2011-49377.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of...CVE-2020-8419Fix available8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS...CVE-2020-8421Fix available6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler...CVE-2020-8420Fix available8.8 High
- joomla!, joomla joomla\! +1 moreMultiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php...CVE-2011-35955.4 Medium
- joomla!, joomla joomla\! +1 moreJoomla! 1.5x through 1.5.12: Missing JEXEC CheckCVE-2011-49075.3 Medium
- joomla!, joomla joomla\! +1 moreJoomla! before 2.5.3 allows Admin Account Creation.CVE-2012-1563Public exploit7.5 High
- joomla! core, joomla joomla\! +1 moreJoomla! core before 2.5.3 allows unauthorized password change.CVE-2012-15627.5 High
- joomla joomla\!In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries...CVE-2019-198469.8 Critical
- joomla joomla\!In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure.CVE-2019-198455.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.13. A missing token check in com_template causes a...CVE-2019-186508.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.13. A missing access check in the phputf8 mapping...CVE-2019-186745.3 Medium
- joomla joomla\!Joomla! XSS in Default TemplatesCVE-2019-16725Fix available6.1 Medium
- joomla joomla\!In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in...CVE-2019-150285.3 Medium
- joomla joomla\!In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields...CVE-2019-146548.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently...CVE-2019-127666.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable...CVE-2019-12765Public exploitEPSS 10.5%9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be...CVE-2019-127646.5 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly...CVE-2019-118096.1 Medium
- typo3 pharstreamwrapper, debian linux, drupal +2 more +4 moreDirectory Traversal in typo3/phar-stream-wrapperCVE-2019-11831Fix available9.8 Critical
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of...CVE-2019-109467.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly...CVE-2019-10945Public exploitEPSS 40.0%9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to...CVE-2019-97146.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks,...CVE-2019-97137.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input...CVE-2019-97126.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks...CVE-2019-97116.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various...CVE-2019-77446.1 Medium
- joomla joomla\!Joomla! Object Injection VulnerabilityCVE-2019-7743Fix available9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. A combination of specific web server...CVE-2019-77426.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration...CVE-2019-77416.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code...CVE-2019-77406.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child...CVE-2019-77396.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in mod_banners leads to a...CVE-2019-62646.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration...CVE-2019-6263Public exploit4.8 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration...CVE-2019-62625.4 Medium
- Show moreLoading…