joomla

515 tracked vulnerabilities.

CVE-2019-7741 MEDIUM
Joomla! 2.5.0-3.9.2 - Stored Cross-Site Scripting in Global Configuration Help URL
Feb 12, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-7740 MEDIUM
Joomla! 2.5.0-3.9.2 - Cross-Site Scripting in core.js writeDynaList
Feb 12, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-7739 MEDIUM
Joomla! < 3.9.2 - Unintended Text Filter Override in Global Configuration
Feb 12, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-6264 MEDIUM
Joomla! < 3.9.2 - Stored Cross-Site Scripting in mod_banners
Jan 16, 2019
CVSS 6.1
EPSS 0.00
CVE-2019-6263 MEDIUM
Joomla! < 3.9.2 - Stored Cross-Site Scripting in Global Configuration Text Filter Settings
Jan 16, 2019
CVSS 4.8
EPSS 0.00
CVE-2019-6262 MEDIUM
Joomla! < 3.9.2 - Stored Cross-Site Scripting in Global Configuration Help URL
Jan 16, 2019
CVSS 5.4
EPSS 0.00
CVE-2019-6261 MEDIUM
Joomla! 2.5.0-3.9.1 - Stored Cross-Site Scripting in com_contact
Jan 16, 2019
CVSS 6.1
EPSS 0.00
CVE-2018-17859 MEDIUM
Joomla! < 3.8.13 - Unauthenticated Mail Submission in Disabled Contact Forms
Oct 09, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-17858 HIGH
Joomla! < 3.8.13 - Cross-Site Request Forgery in com_installer
Oct 09, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-17857 MEDIUM
Joomla! < 3.8.13 - Incorrect Authorization in Tags Search Fields
Oct 09, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-17856 HIGH
Joomla! < 3.8.13 - Authenticated Remote Code Execution via com_joomlaupdate
Oct 09, 2018
CVSS 7.2
EPSS 0.04
CVE-2018-17855 HIGH
Joomla! <3.8.13 - Privilege Escalation
Oct 09, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-15882 CRITICAL
Joomla! < 3.8.12 - Unrestricted Upload of File with Dangerous Type via PHAR File Bypass
Aug 29, 2018
CVSS 9.8
EPSS 0.00
CVE-2018-15881 HIGH
Joomla! <3.8.12 - Privilege Escalation
Aug 29, 2018
CVSS 7.5
EPSS 0.00
CVE-2018-15880 MEDIUM
Joomla! < 3.8.12 - Stored Cross-Site Scripting in User Profile Page
Aug 29, 2018
CVSS 5.4
EPSS 0.00
CVE-2018-12712 HIGH
Joomla! <3.8.9 - Local File Inclusion
Jun 26, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-12711 MEDIUM
Joomla! 1.6.0-3.8.8 - Reflected Cross-Site Scripting in Language Switcher Module
Jun 26, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-6378 MEDIUM
Joomla! < 3.8.8 - Cross-Site Scripting in Media Manager
May 22, 2018
CVSS 6.1
EPSS 0.02
CVE-2018-11328 MEDIUM
Joomla! < 3.8.8 - Cross-Site Scripting via Unescaped User-Info in Redirect URI
May 22, 2018
CVSS 4.7
EPSS 0.00
CVE-2018-11327 MEDIUM
Joomla! < 3.8.8 - Unauthorized Exposure of Sensitive Tag Information
May 22, 2018
CVSS 4.3
EPSS 0.00
CVE-2018-11326 MEDIUM
Joomla! < 3.8.8 - Cross-Site Scripting
May 22, 2018
CVSS 4.8
EPSS 0.00
CVE-2018-11325 CRITICAL
Joomla! < 3.8.8 - Plaintext Password Exposure in Web Installer
May 22, 2018
CVSS 9.8
EPSS 0.00
CVE-2018-11324 MEDIUM
Joomla! < 3.8.8 - Session Deletion Race Condition
May 22, 2018
CVSS 5.9
EPSS 0.00
CVE-2018-11323 HIGH
Joomla! < 3.8.8 - Improper Privilege Management
May 22, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-11322 HIGH
Joomla! < 3.8.8 - Unrestricted Upload of PHAR Files
May 22, 2018
CVSS 7.5
EPSS 0.00
Products
joomla\! 282 joomla 81 joomla-cms 8 bsq_sitestats 6 rs_gallery2 4 com_beamospetition 3 com_weblinks 3 framework 3 archive 2 com_astatspro 2 com_downloads 2 com_facileforms 2 com_mailto 2 com_pcchess 2 com_pccookbook 2 com_rapidrecipe 2 com_sef 2 filter 2 jd-wiki 2 joomla-platform 2 akobook 1 application 1 be_it_easypartner_component 1 bibtex 1 car_manager 1 classifieds_component 1 colophon 1 com_acajoom 1 com_acctexp 1 com_artistavenue 1
Quick Filters
Critical CVEs With Exploits In CISA KEV