Skip to contentJoomla vulnerabilities
Newest
- joomla joomla\!, joomla! project cms +1 more[20220306] - Core - Inadequate validation of internal URLsCVE-2022-237986.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20220305] - Core - Inadequate filtering on the selected IdsCVE-2022-237979.8 Critical
- joomla joomla\!, joomla! project cms +1 more[20220304] - Core - Missing input validation within com_fields class inputsCVE-2022-237966.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20220303] - Core - User row are not bound to a authentication mechanismCVE-2022-237959.8 Critical
- joomla joomla\!, joomla! project cms, joomla/filesystem +2 more[20220302] - Core - Path Disclosure within filesystem error messagesCVE-2022-23794Fix available5.3 Medium
- joomla joomla\!, joomla! project cms, joomla/archive +2 more[20220301] - Core - Zip Slip within the Tar extractorCVE-2022-23793Fix available7.5 High
- joomla joomla\!, joomla! project cms +1 more[20210801] - Core - Insufficient access control for com_media deletion endpointCVE-2021-260409.1 Critical
- joomla joomla\!, joomla! project cms +1 more[20210705] - Core - XSS in com_media imagelistCVE-2021-260396.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210704] - Core - Privilege escalation through com_installerCVE-2021-260387.5 High
- joomla! project cms, joomla joomla\! +1 more[20210703] - Core - Lack of enforced session terminationCVE-2021-260375.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210702] - Core - DoS through usergroup table manipulationCVE-2021-260367.5 High
- joomla joomla\!, joomla! project cms +1 more[20210701] - Core - XSS in JForm Rules fieldCVE-2021-260356.1 Medium
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow...CVE-2010-14359.8 Critical
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to...CVE-2010-14347.5 High
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the...CVE-2010-14339.8 Critical
- open source joomla, joomla joomla\! +1 moreJoomla! Core is prone to an information disclosure vulnerability. Attackers can exploit this...CVE-2010-14327.5 High
- joomla joomla\!, joomla! project cms +1 more[20210503] - Core - CSRF in data download endpointsCVE-2021-260346.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20210502] - Core - CSRF in AJAX reordering endpointCVE-2021-260336.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20210501] - Core - Adding HTML to the executable block list of MediaHelper::canUploadCVE-2021-260326.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210402] - Core - Inadequate filters on module layout settingsCVE-2021-260315.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210401] - Core - Escape xss in logo parameter error pagesCVE-2021-26030EPSS 82.8%6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author fieldCVE-2021-26029Fix available5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210308] - Core - Path Traversal within joomla/archive zip classCVE-2021-26028Fix available5.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20210307] - Core - ACL violation within com_content frontend editingCVE-2021-26027Fix available5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210306] - Core - com_media allowed paths that are not intended for image uploadsCVE-2021-23132Public exploitFix available7.5 High
- joomla joomla\!, joomla! project cms +1 more[20210305] - Core - Input validation within the template managerCVE-2021-23131Fix available7.5 High
- joomla joomla\!, joomla! project cms +1 more[20210304] - Core - XSS within the feed parser libraryCVE-2021-23130Fix available6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210303] - Core - XSS within alert messages showed to usersCVE-2021-23129Fix available6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210302] - Core - Potential Insecure FOFEncryptRandvalCVE-2021-23128Fix available9.1 Critical
- joomla joomla\!, joomla! project cms +1 more[20210301] - Core - Insecure randomness within 2FA secret generationCVE-2021-23127Fix available9.1 Critical
- joomla joomla\!, joomla! project cms +1 more[20210301] - Core - Insecure randomness within 2FA secret generationCVE-2021-23126Fix available5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210103] - Core - XSS in com_tags image parametersCVE-2021-231256.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210102] - Core - XSS in mod_breadcrumbs aria-label attributeCVE-2021-23124EPSS 79.0%6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210101] - Core - com_modules exposes module namesCVE-2021-231235.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20201107] - Core - Write ACL violation in multiple core viewsCVE-2020-356167.5 High
- joomla joomla\!, joomla! project cms +1 more[20201106] - Core - CSRF in com_privacy emailexport featureCVE-2020-356156.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20201105] - Core - User Enumeration in backend loginCVE-2020-356145.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20201104] - Core - SQL injection in com_users list viewCVE-2020-35613EPSS 28.9%9.8 Critical
- joomla joomla\!, joomla! project cms +1 more[20201103] - Core - Path traversal in mod_random_imageCVE-2020-356127.5 High
- joomla joomla\!, joomla! project cms +1 more[20201102] - Core - Disclosure of secrets in Global Configuration pageCVE-2020-356117.5 High
- joomla joomla\!, joomla! project cms +1 more[20201101] - Core - com_finder ignores access levels on autosuggestCVE-2020-356107.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of...CVE-2020-24598Fix available6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.21. Lack of escaping in mod_latestactions allows...CVE-2020-24599Fix available6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install...CVE-2020-157006.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups...CVE-2020-156995.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information...CVE-2020-156985.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table...CVE-2020-156974.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows...CVE-2020-156966.1 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request...CVE-2020-156956.3 Medium
- joomla joomla\!In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.CVE-2020-13760Fix available8.8 High
- Show moreLoading…