Joomla! Project vulnerabilities
140 CVEs and advisories name Joomla! Project as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-26029[20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field
- CVE-2021-26028[20210308] - Core - Path Traversal within joomla/archive zip class
- CVE-2021-26027[20210307] - Core - ACL violation within com_content frontend editing
- CVE-2021-23132[20210306] - Core - com_media allowed paths that are not intended for image uploads
- CVE-2021-23131[20210305] - Core - Input validation within the template manager
- CVE-2021-23130[20210304] - Core - XSS within the feed parser library
- CVE-2021-23129[20210303] - Core - XSS within alert messages showed to users
- CVE-2021-23128[20210302] - Core - Potential Insecure FOFEncryptRandval
- CVE-2021-23127[20210301] - Core - Insecure randomness within 2FA secret generation
- CVE-2021-23126[20210301] - Core - Insecure randomness within 2FA secret generation
- CVE-2021-23125[20210103] - Core - XSS in com_tags image parameters
- CVE-2021-23124[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
- CVE-2021-23123[20210101] - Core - com_modules exposes module names
- CVE-2020-35616[20201107] - Core - Write ACL violation in multiple core views
- CVE-2020-35615[20201106] - Core - CSRF in com_privacy emailexport feature
- CVE-2020-35614[20201105] - Core - User Enumeration in backend login
- CVE-2020-35613[20201104] - Core - SQL injection in com_users list view
- CVE-2020-35612[20201103] - Core - Path traversal in mod_random_image
- CVE-2020-35611[20201102] - Core - Disclosure of secrets in Global Configuration page
- CVE-2020-35610[20201101] - Core - com_finder ignores access levels on autosuggest