Lucene search
+L

25276 matches found

Cvelist
Cvelist
added 2026/08/22 11:16 a.m.24 views

CVE-2026-66916 Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the...

6.9CVSS0.00509EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/08/22 11:12 a.m.10 views

EUVD-2026-64248

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS5.5AI score0.00466EPSS
SaveExploits1References1
CVE
CVE
added 2026/08/22 11:12 a.m.17 views

CVE-2026-66917

JoomGallery (a Joomla extension) versions prior to 4.3.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. An authenticated user with privileged access can embed an XSS payload in any image, resulting in JavaScript execution in the browser of every visitor who views the affected ...

8.6CVSS5.5AI score0.00466EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/08/22 11:12 a.m.27 views

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS0.00466EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/08/22 11:12 a.m.7 views

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS5.4AI score0.00466EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.14 views

PT-2026-79582

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.3 - ???...

10CVSS5.1AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.13 views

PT-2026-79586

Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector...

8.6CVSS5.2AI score0.00258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.13 views

PT-2026-79573

Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot...

8.7CVSS5.5AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.11 views

PT-2026-79578

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

9.3CVSS5.6AI score0.00249EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/21 8:16 p.m.8 views

CVE-2026-67361

Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint accepted POST requests from unauthenticated visitors with no CSRF token. Compounding this, the installer manifest omitted...

6.9CVSS0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 7:23 p.m.26 views

CVE-2026-67361 Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint accepted POST requests from unauthenticated visitors with no CSRF token. Compounding this, the installer manifest omitted...

6.9CVSS0.00165EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 7:23 p.m.13 views

EUVD-2026-64064

Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint accepted POST requests from unauthenticated visitors with no CSRF token. Compounding this, the installer manifest omitted...

6.9CVSS5.5AI score0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 7:23 p.m.17 views

CVE-2026-67361

J2Store (a Joomla e-commerce extension) is vulnerable to unauthenticated file upload in versions 1.0.0–3.3.20, 4.0.0–4.0.20, and 4.1.0–4.1.5. The file upload endpoint accepted POST requests without authentication or CSRF protection. Additionally, the installer manifest omitted the upload and invo...

6.9CVSS5.3AI score0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/21 7:23 p.m.8 views

CVE-2026-67361 Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - The file upload endpoint accepted POST requests from unauthenticated visitors with no CSRF token. Compounding this, the installer manifest omitted...

6.9CVSS5.3AI score0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/21 7:20 p.m.10 views

CVE-2026-67358 Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token could increment the download limit counter on a download record belonging to a different order. The endpoint also lacked a CSRF token...

5.3CVSS5.3AI score0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 7:20 p.m.26 views

CVE-2026-67358 Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token could increment the download limit counter on a download record belonging to a different order. The endpoint also lacked a CSRF token...

5.3CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 7:20 p.m.13 views

CVE-2026-67358

J2Store (a Joomla extension by j2commerce.com) is affected by a download quota manipulation vulnerability in versions 1.0.0–3.3.20, 4.0.0–4.0.20, and 4.1.0–4.1.5. An authenticated user holding a valid order token could increment the download limit counter on a download record belonging to a diffe...

5.3CVSS5.3AI score0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 7:16 p.m.12 views

CVE-2026-67360

J2Store (a Joomla e-commerce extension by j2commerce.com) is affected by a cross-customer order replication vulnerability in versions 1.0.0–3.3.20, 4.0.0–4.0.20, and 4.1.0–4.1.5. An authenticated user can supply another customer's order_id to copy that customer's cart contents and address data in...

6.3CVSS5.3AI score0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/21 7:16 p.m.9 views

CVE-2026-67360 Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another customer's orderid to copy their cart contents and address data into the attacker's session. The CSRF token was validated but...

6.3CVSS5.3AI score0.00239EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/21 7:11 p.m.6 views

CVE-2026-50813

A flaw was found in SQLite. A local attacker can exploit this vulnerability by manipulating the Session Extension changeset concat/changegroup merge path. This allows the attacker to obtain sensitive information, leading to information disclosure...

6.1CVSS5.2AI score0.00159EPSS
SaveExploits0References6
Rows per page
Query Builder