CVE-2026-30895

Lack of output escaping leads to a XSS vector in the readmore links for comcontent...

BIT-JOOMLA-2026-30895 Joomla! Core - [20260504] - XSS in readmore links

Lack of output escaping leads to a XSS vector in the readmore links for comcontent...

CVE-2026-30895

Lack of output escaping leads to a XSS vector in the readmore links for comcontent...

CVE-2026-30895 Joomla! Core - [20260504] - XSS in readmore links

Lack of output escaping leads to a XSS vector in the readmore links for comcontent...

EUVD-2026-31874

Lack of output escaping leads to a XSS vector in the readmore links for comcontent...

CVE-2026-30895 Joomla! Core - [20260504] - XSS in readmore links

Lack of output escaping leads to a XSS vector in the readmore links for comcontent...

CVE-2026-30895

CVE-2026-30895 affects Joomla! Core (component: com_content). The root cause is lack of output escaping in readmore links, enabling a XSS vector. CVSS 4.0 base score 6.9 (MEDIUM) with attack vector NETWORK, high privileges required, passive user interaction. Public references point to Joomla secu...

CVE-2026-21630 Joomla! Core - [20260302] - SQL injection in com_content articles webservice endpoint

Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint...

CVE-2026-21630

CVE-2026-21630 affects Joomla! Core — specifically the com_content articles webservice endpoint. The root cause is improperly built order clauses that enable a SQL injection. Exploitation details are not provided in the supplied documents, but CVSS metrics indicate a high-impact vulnerability aff...

[20260503] - Core - XSS in com_contenthistory

Lack of output escaping leads to a XSS vector in the content history component...

[20260302] - Core - SQL injection in com_content articles webservice endpoint

Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

CVE-2015-7899

The comcontent component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-7657

Name of the Vulnerable Software and Affected Versions Joomla! versions 3.x before 3.4.5 Description The issue concerns the com content component, which does not properly check Access Control Lists ACLs, allowing remote attackers to obtain sensitive information. ACLs are used to define permissions...

PT-2012-1991

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5.12 Description The issue allows remote attackers to inject arbitrary web script or HTML via the HTTP REFERER header to various components and templates, including 1 "components/com...

PT-2011-3908

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.6.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via various components, including 1 the com contact component, as demonstrated by the Itemid parameter to "index.php"; 2 the c...

PT-2010-5021

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.20 Joomla! versions 1.6.x through 1.6.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving multiple encoded entities, as...