Joomla! Project Joomla! CMS vulnerabilities, page 3
137 vulnerabilities
Known vulnerabilities in Joomla! Project Joomla! CMS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-27914joomla! projectjoomla! cms+1
EPSS score0.50%
An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in com_media.CVE-2022-27913joomla! projectjoomla! cms+1EPSS score0.44%
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.CVE-2022-23797joomla! projectjoomla! cms+1EPSS score1.11%
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection.CVE-2022-23800joomla! projectjoomla! cms+2EPSS score0.67%
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.CVE-2022-23801joomla! projectjoomla! cms+1EPSS score0.59%
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.CVE-2022-23798joomla! projectjoomla! cms+1EPSS score0.59%
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.CVE-2022-23795joomla! projectjoomla! cms+1EPSS score1.15%
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. A user row was not bound to a specific authentication mechanism which could under very special circumstances allow an account takeover.CVE-2022-23796joomla! projectjoomla! cms+1EPSS score0.59%
An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.CVE-2022-23793joomla! projectjoomla! cms+2EPSS score2.08%
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.CVE-2022-23799joomla! projectjoomla! cms+2EPSS score1.23%
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.CVE-2022-23794joomla! projectjoomla! cms+2EPSS score0.92%
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application.CVE-2024-21731joomla! projectjoomla! cms+1EPSS score0.44%
Improper handling of input could lead to an XSS vector in the StringHelper::truncate method.CVE-2024-21722joomla! projectjoomla! cms+1EPSS score0.51%
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.CVE-2024-21726joomla! projectjoomla! cms+1EPSS score48.84%
Inadequate content filtering leads to XSS vulnerabilities in various components.CVE-2024-21724joomla! projectjoomla! cms+1EPSS score0.51%
Inadequate input validation for media selection fields lead to XSS vulnerabilities in various extensions.CVE-2024-21729joomla! projectjoomla! cms+1EPSS score0.44%
Inadequate input validation leads to XSS vulnerabilities in the accessiblemedia field.CVE-2024-21725joomla! projectjoomla! cms+1EPSS score32.21%
Inadequate escaping of mail addresses lead to XSS vulnerabilities in various components.CVE-2024-21723joomla! projectjoomla! cms+1EPSS score0.54%
Inadequate parsing of URLs could result into an open redirect.CVE-2024-21730joomla! projectjoomla! cms+1EPSS score0.42%
The fancyselect list field layout does not correctly escape inputs, leading to a self-XSS vector.CVE-2024-40747joomla! projectjoomla! cms+1EPSS score0.26%
Various module chromes didn't properly process inputs, leading to XSS vectors.