1 matches found
BIT-JOOMLA-2021-23123 [20210101] - Core - com_modules exposes module names
An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of commodules leak names of unpublished and/or inaccessible modules...