19181 matches found
PT-2025-40515
Name of the Vulnerable Software and Affected Versions Joomla module mod vvisit counter version 2.0.4j3 Description A SQL injection issue exists in the mod vvisit counter module. An attacker can retrieve database content through the cip vvisitcounter cookie at any endpoint where the plugin tracks...
Joomla! XSS Vulnerability (20250901)
Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
Joomla! User Enumeration Vulnerability (20250902)
Joomla! is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescripti...
GHSA-FM22-G2Q9-J3PW Joomla! CMS vulnerable to XSS via the input filter
Improper handling of input could lead to a cross-site scripting XSS vector in the checkAttribute method of the input filter framework class...
Joomla! CMS vulnerable to XSS via the input filter
Improper handling of input could lead to a cross-site scripting XSS vector in the checkAttribute method of the input filter framework class...
Cross-site Scripting (XSS)
Overview joomla/filter is a Joomla Filter Package Affected versions of this package are vulnerable to Cross-site Scripting XSS via the checkAttribute method. An attacker can execute arbitrary scripts in the context of the affected application by submitting specially crafted input that bypasses...
CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method
Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...
CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method
Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...
CVE-2025-54477
CVE-2025-54477 describes an issue in Joomla! where the authentication request handling in the passkey method allows user enumeration. The initial entry cites an improper handling of authentication requests leading to a user enumeration vector, with a CVSS v3.1 base score of 5.3 (Network attack, n...
CVE-2025-54476 Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code
Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...
CVE-2025-54476
CVE-2025-54476 describes an XSS vulnerability in Joomla!’s input filter framework, specifically in the checkAttribute method. The initial CVE entry reports improper handling of input leading to an XSS vector, with a CVSS 4.0 base score of 4.8 (Medium) and Network attack vector with High privilege...
CVE-2025-54476 Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code
Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...
Joomla! CMS 安全漏洞
Joomla! CMS is an open source content management system for Joomla! A security vulnerability exists in the Joomla! CMS input filtering framework, which stems from improper handling of inputs to the checkAttribute method and could lead to a cross-site scripting attack...
Joomla! CMS 安全漏洞
Joomla! CMS is an open source content management system from Joomla! A security vulnerability exists in Joomla! CMS that stems from improper handling of authentication requests, which could lead to user enumeration attacks...
Joomla 4.0.x < 4.4.14 / 5.0.x < 5.3.4 Joomla 5.3.4 Security & Bugfix Release (5936-joomla-5-3-4-security-bugfix-release)
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 4.4.14 or 5.0.x prior to 5.3.4. It is, therefore, affected by a vulnerability. - Improper handling of authentication requests lead to a user enumeration vector in the passkey...
[20260102] - Core - XSS vectors in the pagebreak and pagenavigation plugins
Lack of output escaping leads to a XSS vector in the pagebreak and pagenavigation plugins...
VulnCheck KEV: CVE-2018-17254
The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...
[20250902] - Core - User-Enumeration in passkey authentication method
Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...
