Joomla

509 tracked vulnerabilities.

CVE-2025-63083 MEDIUM
Pagebreak Plugin - XSS
Jan 06, 2026
CVSS 6.1
EPSS 0.00
CVE-2025-63082 MEDIUM
Product - XSS
Jan 06, 2026
CVSS 6.1
EPSS 0.00
CVE-2025-54476
Joomla Filter < 4.0.1 - XSS
Sep 30, 2025
EPSS 0.00
CVE-2025-25227 HIGH
Product <2FA - Auth Bypass
Apr 08, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-25226 CRITICAL
Database package <x - SQL Injection
Apr 08, 2025
CVSS 9.8
EPSS 0.00
CVE-2024-40749 HIGH
Product <Version> - Info Disclosure
Jan 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2024-40748 HIGH
Product - XSS
Jan 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2024-40747 MEDIUM
Various Chrome Modules - XSS
Jan 07, 2025
CVSS 6.1
EPSS 0.00
CVE-2024-40743 MEDIUM
Product - XSS
Aug 20, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-27187 HIGH
Product - Info Disclosure
Aug 20, 2024
CVSS 7.5
EPSS 0.00
CVE-2024-27186 MEDIUM
Mail Template Feature - XSS
Aug 20, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-27185 CRITICAL
Pagination Class - SSRF
Aug 20, 2024
CVSS 9.1
EPSS 0.00
CVE-2024-27184 MEDIUM
Product <Version> - SSRF
Aug 20, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-26279 MEDIUM
Joomla! < 3.10.16 - XSS
Jul 09, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-26278 MEDIUM
Joomla! < 3.10.16 - XSS
Jul 09, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21731 MEDIUM
Joomla! < 3.10.15 - XSS
Jul 09, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21730 MEDIUM
Joomla! < 4.4.6 - XSS
Jul 09, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-21729 MEDIUM
Joomla! < 4.4.6 - XSS
Jul 09, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21726 MEDIUM
Joomla! < 3.10.15 - XSS
Feb 29, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-21725 MEDIUM
Joomla! < 4.4.3 - XSS
Feb 29, 2024
CVSS 6.1
EPSS 0.01
CVE-2024-21724 MEDIUM
Joomla! < 3.10.15 - XSS
Feb 29, 2024
CVSS 6.1
EPSS 0.00
CVE-2024-21723 MEDIUM
Joomla! < 3.10.15 - Open Redirect
Feb 29, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-21722 MEDIUM
Joomla! < 3.10.15 - Insufficient Session Expiration
Feb 29, 2024
CVSS 6.3
EPSS 0.00
CVE-2023-40626 HIGH
Language File Parsing - Info Disclosure
Nov 29, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-23755 HIGH
Joomla! < 4.3.2 - Brute Force
May 30, 2023
CVSS 7.5
EPSS 0.00