Joomla! Project Joomla! CMS vulnerabilities, page 5
137 vulnerabilities
Known vulnerabilities in Joomla! Project Joomla! CMS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-71574joomla! project · joomla! cms +1 moreJoomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2An improper access check allows unauthorized users to perform mutation actions in webservice endpoints, where the same mutation was restricted in the backend UI.EPSS0.34%MediumCVE-2026-71572joomla! project · joomla! cms +1 moreJoomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion.EPSS0.24%HighCVE-2026-71573joomla! project · joomla! cms +1 moreJoomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2An improper implementation prevented configured CORS origins from being properly validated in CORS requests.EPSS0.34%CriticalCVE-2026-48898joomla! project · joomla! cms +1 moreJoomla! Core - [20260513] - Privilege escalation through com_users batch taskAn improper access check allows privilege escalation through the com_users batch task.EPSS0.48%HighCVE-2026-48948joomla! project · joomla! cms +1 moreJoomla! Core - [20260702] - Incorrect Access Control in com_contact vcf downloadAn improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.EPSS0.42%HighCVE-2026-48896joomla! project · joomla! cms +1 moreJoomla! Core - [20260511] - MFA Authentication BypassInsufficient state checks lead to a vector that allows to bypass 2FA checks.EPSS0.36%MediumCVE-2026-48954joomla! project · joomla! cms +1 moreJoomla! Core - [20260708] - XSS through language overridesImproper validation leads to a generic XSS vector in the language override feature.EPSS0.24%CriticalCVE-2026-48904joomla! project · joomla! cms +1 moreJoomla! Core - [20260514] - Privilege escalation through com_users webservice endpointsAn improper access check allows privelege escalation through the com_users group editing webservice endpoint.EPSS0.53%MediumCVE-2026-48947joomla! project · joomla! cms +1 moreJoomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpointsAn improper access check allows privileged users to overwrite media files without editing permissions.EPSS0.33%HighCVE-2026-48897joomla! project · joomla! cms +1 moreJoomla! Core - [20260512] - MFA Authentication BypassInsufficient state checks lead to a vector that allows to bypass 2FA checks.EPSS0.36%CriticalCVE-2026-48899joomla! project · joomla! cms +1 moreJoomla! Core - [20260515] - Incorrect Access Control in sample data pluginsAn improper access check allows privilege escalation through the com_users batch task.EPSS0.42%HighCVE-2026-48958joomla! project · joomla! cms +1 moreJoomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpointsAn improper access check allows unauthorized users to create custom fields via webservices endpoints.EPSS0.46%MediumCVE-2026-48952joomla! project · joomla! cms +1 moreJoomla! Core - [20260706] - XSS in com_installerLack of escaping leads to an XSS vulnerability in the update list view of com_installer.EPSS0.24%CriticalCVE-2026-48902joomla! project · joomla! cms +1 moreJoomla! Core - [20260518] - Transport encryption downgrade for password and username reset linksThe password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.EPSS0.33%MediumCVE-2026-48951joomla! project · joomla! cms +1 moreJoomla! Core - [20260705] - XSS in various modalreturn layoutsLack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.EPSS0.24%MediumCVE-2026-48955joomla! project · joomla! cms +1 moreJoomla! Core - [20260709] - Incorrect Access Control in com_workflowAn improper access check allows unauthorized users to access workflow stage and transition information.EPSS0.34%HighCVE-2026-48901joomla! project · joomla! cms +1 moreJoomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objectsThe InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.EPSS0.42%MediumCVE-2026-48950joomla! project · joomla! cms +1 moreJoomla! Core - [20260704] - XSS in com_templatesLack of escaping leads to an XSS vulnerability in the file management view of com_templates.EPSS0.24%MediumCVE-2026-48949joomla! project · joomla! cms +1 moreJoomla! Core - [20260703] - XSS in MFA method managementLack of validation leads to an XSS vulnerability in the MFA management views.EPSS0.24%MediumCVE-2026-48956joomla! project · joomla! cms +1 moreJoomla! Core - [20260710] - Incorrect Access Control in com_modulesAn improper access check allows users to display a list of modules in the frontend.EPSS0.27%