Joomla vulnerabilities
510 vulnerabilities
Known vulnerabilities in Joomla products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 151 products.
Products
50 of 151- Joomla\!398 vulnerabilities
- Bsq Sitestats6 vulnerabilities
- Rs Gallery24 vulnerabilities
- Com Astatspro2 vulnerabilities
- Com Beamospetition2 vulnerabilities
- Com Rapidrecipe2 vulnerabilities
- Jd Wiki2 vulnerabilities
- Joomla! Core2 vulnerabilities
- Akobook1 vulnerabilities
- Be It Easypartner Component1 vulnerabilities
- Bibtex1 vulnerabilities
- Calendar Planner1 vulnerabilities
- Car Manager1 vulnerabilities
- Classifieds Component1 vulnerabilities
- Colophon1 vulnerabilities
- Com Acajoom1 vulnerabilities
- Com Acctexp1 vulnerabilities
- Com Awesom1 vulnerabilities
- Com Biblestudy1 vulnerabilities
- Com Camelcitydb21 vulnerabilities
- Com Casiino Blackjack1 vulnerabilities
- Com Casino1 vulnerabilities
- Com Casino Videopoker1 vulnerabilities
- Com Casinobase1 vulnerabilities
- Com Classifieds1 vulnerabilities
- Com Comments1 vulnerabilities
- Com Comprofiler Component1 vulnerabilities
- Com Content1 vulnerabilities
- Com Datsogallery1 vulnerabilities
- Com Directory1 vulnerabilities
- Com Dtregister1 vulnerabilities
- Com Eventing1 vulnerabilities
- Com Events1 vulnerabilities
- Com Ewriting1 vulnerabilities
- Com Facileforms1 vulnerabilities
- Com Flippingbook1 vulnerabilities
- Com Gameq1 vulnerabilities
- Com Garyscookbook1 vulnerabilities
- Com Hotproperties1 vulnerabilities
- Com Idoblog1 vulnerabilities
- Com Imagebrowser1 vulnerabilities
- Com Jb21 vulnerabilities
- Com Jokes1 vulnerabilities
- Com Joobb1 vulnerabilities
- Com Joomradio1 vulnerabilities
- Com Jotloader1 vulnerabilities
- Com Jvcomment1 vulnerabilities
- Com Marketplace1 vulnerabilities
- Com Mcquiz1 vulnerabilities
- Com Mosmedia1 vulnerabilities
CVE-2018-11322joomlajoomla\!
EPSS score1.74%
An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver.CVE-2018-11327joomlajoomla\!EPSS score1.40%
An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission.CVE-2018-11328joomlajoomla\!EPSS score1.33%
An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and password when the Location: header cannot be used), a lack of escaping the user-info component of the URI could result in an XSS vulnerability.CVE-2018-11323joomlajoomla\!EPSS score2.71%
An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higher permissions.CVE-2018-11321joomlajoomla\!EPSS score1.93%
An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.CVE-2018-11324joomlajoomla\!EPSS score1.29%
An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was expected to be destroyed would be recreated.CVE-2018-11325joomlajoomla\!EPSS score3.20%
An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.CVE-2018-11326joomlajoomla\!EPSS score1.03%
An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.CVE-2018-17855joomlajoomla\!EPSS score1.90%
An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.CVE-2018-17857joomlajoomla\!EPSS score1.18%
An issue was discovered in Joomla! before 3.8.13. Inadequate checks on the tags search fields can lead to an access level violation.CVE-2018-17858joomlajoomla\!EPSS score0.98%
An issue was discovered in Joomla! before 3.8.13. com_installer actions do not have sufficient CSRF hardening in the backend.CVE-2018-17859joomlajoomla\!EPSS score1.35%
An issue was discovered in Joomla! before 3.8.13. Inadequate checks in com_contact could allow mail submission in disabled forms.CVE-2018-17856joomlajoomla\!EPSS score2.69%
An issue was discovered in Joomla! before 3.8.13. com_joomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access com_joomlaupdate and trigger code execution.CVE-2018-15882joomlajoomla\!EPSS score2.93%
An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.CVE-2018-15881joomlajoomla\!EPSS score2.20%
An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation.CVE-2018-15880joomlajoomla\!EPSS score1.03%
An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a stored XSS attack.CVE-2018-6377joomlajoomla\!EPSS score56.50%
In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio, and checkboxCVE-2018-6379joomlajoomla\!EPSS score1.67%
In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an XSS vulnerability.CVE-2018-6376joomlajoomla\!EPSS score4.14%
In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message.CVE-2018-6380joomlajoomla\!EPSS score1.67%
In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system.