Joomla! Project vulnerabilities, page 5
140 vulnerabilities
Known vulnerabilities in Joomla! Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
HighCVE-2026-40384joomla! project · joomla! cms +1 moreJoomla! Core - [20260510] - Path traversal in com_media webservice endpointAn improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.EPSS0.49%HighCVE-2026-71574joomla! project · joomla! cms +1 moreJoomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2An improper access check allows unauthorized users to perform mutation actions in webservice endpoints, where the same mutation was restricted in the backend UI.EPSS0.34%MediumCVE-2026-71572joomla! project · joomla! cms +1 moreJoomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion.EPSS0.24%HighCVE-2026-71573joomla! project · joomla! cms +1 moreJoomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2An improper implementation prevented configured CORS origins from being properly validated in CORS requests.EPSS0.34%CriticalCVE-2026-48898joomla! project · joomla! cms +1 moreJoomla! Core - [20260513] - Privilege escalation through com_users batch taskAn improper access check allows privilege escalation through the com_users batch task.EPSS0.48%HighCVE-2026-48948joomla! project · joomla! cms +1 moreJoomla! Core - [20260702] - Incorrect Access Control in com_contact vcf downloadAn improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.EPSS0.42%HighCVE-2026-48896joomla! project · joomla! cms +1 moreJoomla! Core - [20260511] - MFA Authentication BypassInsufficient state checks lead to a vector that allows to bypass 2FA checks.EPSS0.36%MediumCVE-2026-48954joomla! project · joomla! cms +1 moreJoomla! Core - [20260708] - XSS through language overridesImproper validation leads to a generic XSS vector in the language override feature.EPSS0.24%CriticalCVE-2026-48904joomla! project · joomla! cms +1 moreJoomla! Core - [20260514] - Privilege escalation through com_users webservice endpointsAn improper access check allows privelege escalation through the com_users group editing webservice endpoint.EPSS0.53%MediumCVE-2026-48947joomla! project · joomla! cms +1 moreJoomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpointsAn improper access check allows privileged users to overwrite media files without editing permissions.EPSS0.33%HighCVE-2026-48897joomla! project · joomla! cms +1 moreJoomla! Core - [20260512] - MFA Authentication BypassInsufficient state checks lead to a vector that allows to bypass 2FA checks.EPSS0.36%CriticalCVE-2026-48899joomla! project · joomla! cms +1 moreJoomla! Core - [20260515] - Incorrect Access Control in sample data pluginsAn improper access check allows privilege escalation through the com_users batch task.EPSS0.42%HighCVE-2026-48958joomla! project · joomla! cms +1 moreJoomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpointsAn improper access check allows unauthorized users to create custom fields via webservices endpoints.EPSS0.46%MediumCVE-2026-48952joomla! project · joomla! cms +1 moreJoomla! Core - [20260706] - XSS in com_installerLack of escaping leads to an XSS vulnerability in the update list view of com_installer.EPSS0.24%CriticalCVE-2026-48902joomla! project · joomla! cms +1 moreJoomla! Core - [20260518] - Transport encryption downgrade for password and username reset linksThe password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.EPSS0.33%MediumCVE-2026-48951joomla! project · joomla! cms +1 moreJoomla! Core - [20260705] - XSS in various modalreturn layoutsLack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.EPSS0.24%MediumCVE-2026-48955joomla! project · joomla! cms +1 moreJoomla! Core - [20260709] - Incorrect Access Control in com_workflowAn improper access check allows unauthorized users to access workflow stage and transition information.EPSS0.34%HighCVE-2026-48901joomla! project · joomla! cms +1 moreJoomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter objectsThe InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.EPSS0.42%MediumCVE-2026-48905joomla! project · joomla! framework filter package +1 moreJoomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.Lack of input filtering leads to an XSS vector in the HTML filter code.EPSS0.24%MediumCVE-2026-48950joomla! project · joomla! cms +1 moreJoomla! Core - [20260704] - XSS in com_templatesLack of escaping leads to an XSS vulnerability in the file management view of com_templates.EPSS0.24%