Filtered by vendor Joomla
Subscribe
Total
1002 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21630 | 1 Joomla | 1 Joomla\! | 2026-10-26 | N/A | 8.8 HIGH |
| Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint. | |||||
| CVE-2026-21632 | 1 Joomla | 1 Joomla\! | 2026-10-26 | N/A | 5.4 MEDIUM |
| Lack of output escaping for article titles leads to XSS vectors in various locations. | |||||
| CVE-2026-21629 | 1 Joomla | 1 Joomla\! | 2026-10-26 | N/A | 7.3 HIGH |
| The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers. | |||||
| CVE-2026-23899 | 1 Joomla | 1 Joomla\! | 2026-10-26 | N/A | 8.8 HIGH |
| An improper access check allows unauthorized access to webservice endpoints. | |||||
| CVE-2026-23898 | 1 Joomla | 1 Joomla\! | 2026-10-26 | N/A | 7.2 HIGH |
| Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism. | |||||
| CVE-2026-21631 | 1 Joomla | 1 Joomla\! | 2026-10-26 | N/A | 5.4 MEDIUM |
| Lack of output escaping leads to a XSS vector in the multilingual associations component. | |||||
| CVE-2026-48956 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 5.0 MEDIUM |
| An improper access check allows users to display a list of modules in the frontend. | |||||
| CVE-2026-48953 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.1 MEDIUM |
| Lack of escaping leads to an XSS vulnerability in the generic image output layout. | |||||
| CVE-2026-48948 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 8.8 HIGH |
| An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible. | |||||
| CVE-2026-48955 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.5 MEDIUM |
| An improper access check allows unauthorized users to access workflow stage and transition information. | |||||
| CVE-2026-48950 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.1 MEDIUM |
| Lack of escaping leads to an XSS vulnerability in the file management view of com_templates. | |||||
| CVE-2026-48952 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.1 MEDIUM |
| Lack of escaping leads to an XSS vulnerability in the update list view of com_installer. | |||||
| CVE-2026-48949 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.1 MEDIUM |
| Lack of validation leads to an XSS vulnerability in the MFA management views. | |||||
| CVE-2026-48954 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.1 MEDIUM |
| Improper validation leads to a generic XSS vector in the language override feature. | |||||
| CVE-2026-48958 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 8.8 HIGH |
| An improper access check allows unauthorized users to create custom fields via webservices endpoints. | |||||
| CVE-2026-48951 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 6.1 MEDIUM |
| Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components. | |||||
| CVE-2026-48947 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 4.9 MEDIUM |
| An improper access check allows privileged users to overwrite media files without editing permissions. | |||||
| CVE-2026-48957 | 1 Joomla | 1 Joomla\! | 2026-10-25 | N/A | 8.8 HIGH |
| An improper access check allows unauthorized users to access com_privacy datasets. | |||||
| CVE-2026-72531 | 1 Joomla | 1 Joomla\! | 2026-10-22 | N/A | 5.4 MEDIUM |
| Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to create fields for inaccessible components. | |||||
| CVE-2026-73371 | 1 Joomla | 1 Joomla\! | 2026-10-22 | N/A | 4.3 MEDIUM |
| Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items. | |||||