Joomla! 4.2.x < 4.3.2 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.2.x prior to 4.3.2. It is, therefore, affected by multiple vulnerabilities.

• An open redirect and a Cross-Site Scripting (XSS) within the mfa selection. (CVE-2023-23754)

• A lack of rate limiting allowing brute force attacks against MFA methods. (CVE-2023-23755)

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.