Skip to contentJoomla vulnerabilities
Newest
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration...CVE-2019-62625.4 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in com_contact leads to a...CVE-2019-62616.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. Inadequate checks in com_contact could allow...CVE-2018-178594.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient...CVE-2018-178588.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can...CVE-2018-178574.3 Medium
- joomla joomla\!Joomla RCE VulnerabilityCVE-2018-17856Fix available7.2 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account...CVE-2018-178558.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class...CVE-2018-158829.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can...CVE-2018-158817.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile...CVE-2018-158805.4 Medium
- joomla joomla\!An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks...CVE-2018-127128.8 High
- joomla joomla\!An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before...CVE-2018-127116.1 Medium
- joomla joomla\!In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS...CVE-2018-63786.1 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect...CVE-2018-113284.7 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the...CVE-2018-113274.3 Medium
- joomla joomla\!Joomla! XSS VulnerabilityCVE-2018-11326Fix available4.8 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill...CVE-2018-113259.8 Critical
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as...CVE-2018-113245.9 Medium
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify...CVE-2018-113238.8 High
- joomla joomla\!An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR...CVE-2018-113227.5 High
- joomla joomla\!An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows...CVE-2018-113216.5 Medium
- joomla joomla\!In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads...CVE-2018-8045Public exploitEPSS 28.2%8.8 High
- joomla joomla\!In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in...CVE-2018-63806.1 Medium
- joomla joomla\!In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an...CVE-2018-63796.1 Medium
- joomla joomla\!In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability...CVE-2018-6377EPSS 56.5%6.1 Medium
- joomla joomla\!In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL...CVE-2018-6376Public exploit9.8 Critical
- joomla joomla\!In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication...CVE-2017-166349.8 Critical
- joomla joomla\!In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's...CVE-2017-166334.3 Medium
- joomla joomla\!In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a...CVE-2017-145969.8 Critical
- joomla joomla\!In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro...CVE-2017-145953.7 Low
- joomla joomla\!Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1.CVE-2015-56086.1 Medium
- joomla joomla\!The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which...CVE-2017-113648.8 High
- joomla joomla\!In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS...CVE-2017-116126.1 Medium
- joomla joomla\!Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead...CVE-2017-9934Public exploit6.1 Medium
- joomla joomla\!Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents.CVE-2017-99337.5 High
- joomla joomla\!SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary...CVE-2017-8917Public exploitEPSS 99.8%9.8 Critical
- joomla joomla\!In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on...CVE-2017-80575.3 Medium
- joomla joomla\!In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low...CVE-2017-79896.5 Medium
- joomla joomla\!In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows...CVE-2017-79885.3 Medium
- joomla joomla\!In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names...CVE-2017-79876.1 Medium
- joomla joomla\!In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes...CVE-2017-79866.1 Medium
- joomla joomla\!In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters...CVE-2017-79856.1 Medium
- joomla joomla\!In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the...CVE-2017-79846.1 Medium
- joomla joomla\!In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used...CVE-2017-79835.3 Medium
- joomla joomla\!Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group...CVE-2016-90819.8 Critical
- phpmailer project phpmailer, joomla joomla\!, wordpress +2 moreRemote code execution in PHPMailerCVE-2016-10045Public exploitFix availableEPSS 97.7%9.8 Critical
- php phpmailer, joomla joomla\!, wordpress +2 moreRemote code execution in PHPMailerCVE-2016-10033In KEVPublic exploitFix availableEPSS 99.7%9.8 Critical
- joomla joomla\!An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5....CVE-2016-9838Public exploitEPSS 14.1%7.5 High
- joomla joomla\!An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before...CVE-2016-98377.5 High
- joomla joomla\!The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not...CVE-2016-98369.8 Critical
- Show moreLoading…