CVE-2026-35222

CVE-2026-35222 affects Joomla! Core — com_tags component. The root cause is improperly validated order clauses, leading to authenticated blind SQL injection. Impact is high on confidentiality and integrity; exploitation requires authenticated access with high privileges. No remediation details ar...

BIT-JOOMLA-2021-23125 [20210103] - Core - XSS in com_tags image parameters

An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...

Joomla 3.0.x < 3.9.24 Multiple Vulnerabilities (5830-joomla-3-9-24)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.9.24. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of...

Joomla! 3.1.0 - 3.9.23 XSS Vulnerability

Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

CVE-2021-23125

An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...

CVE-2021-23125

An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...

CVE-2021-23125 [20210103] - Core - XSS in com_tags image parameters

An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...

[20210103] - Core - XSS in com_tags image parameters

Lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...

[20181003] - Core - Access level Violation in com_tags

Inadequate checks on the tags search fields can lead to an access level violation...