CVE-2025-22204

Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability...

CVE-2025-22205

Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x...

CVE-2025-22204

Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability...

CVE-2025-22205

Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x...

CVE-2025-22205

CVE-2025-22205 concerns the Admiror Gallery extension for Joomla, specifically the 4.x branch. The root cause is improper handling of input variables, leading to multiple path traversal vulnerabilities. The CVSS v3.1 base score is 7.5 (HIGH) with Confidentiality Impact: HIGH and no impact on inte...

CVE-2025-22205 Extension - admiror-design-studio.com - Path traversal in the Admiror Gallery 4.x component for Joomla

Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x...

CVE-2025-22205 Extension - admiror-design-studio.com - Path traversal in the Admiror Gallery 4.x component for Joomla

Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x...

CVE-2025-22204 Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla

Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability...

CVE-2025-22204 Extension - regularlabs.com - Remote code execution vulnerability in the Sourcerer extensions < 12.0.0 for Joomla

Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability...

CVE-2025-22204

CVE-2025-22204 affects the Sourcerer extension for Joomla prior to version 11.0.0. The root cause is improper control of code generation within Sourcerer, leading to remote code execution with network access, no required user interaction, and high impact on confidentiality, integrity, and availab...

Joomla! 安全漏洞

Joomla! is a free, open source content management system from Joomla! A security vulnerability exists in Joomla! JS Jobs versions 1.1.5 through 1.4.2, which stems from the presence of a SQL injection vulnerability that allows an authenticated attacker to execute arbitrary SQL commands via the...

Joomla! 安全漏洞

Joomla! is a free, open source content management system from Joomla! open source. A security vulnerability exists in Joomla! prior to version 11.0.0, which stems from a remote code execution vulnerability due to improper code generation control...

PT-2025-4390 · Joomla · Js Jobs Plugin

Name of the Vulnerable Software and Affected Versions: JS Jobs plugin versions 1.1.5 through 1.4.2 for Joomla Description: A SQL injection issue allows authenticated attackers, specifically administrators, to execute arbitrary SQL commands. This is achieved via the fieldfor parameter in the GDPR...

PT-2025-4388 · Joomla · Sourcerer

Name of the Vulnerable Software and Affected Versions: Sourcerer extension for Joomla versions prior to 11.0.0 Description: The issue arises from improper control of code generation in the Sourcerer extension for Joomla, leading to a remote code execution vulnerability. Recommendations: For...

PT-2025-4389

Name of the Vulnerable Software and Affected Versions Admiror Gallery extension for Joomla version branch 4.x Description The issue arises from improper handling of input variables, leading to multiple path traversal vulnerabilities. This allows unauthorized access to sensitive files and...

Joomla! 4.x < 4.4.10 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.20, 4.x prior to 4.4.10 or 5.x prior to 5.2.3. It is, therefore, affected by multiple vulnerabilities. - Various module chromes didn't properly process inputs, leading to XSS...

Joomla! 5.x < 5.2.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.20, 4.x prior to 4.4.10 or 5.x prior to 5.2.3. It is, therefore, affected by multiple vulnerabilities. - Various module chromes didn't properly process inputs, leading to XSS...

Joomla! 3.x < 3.10.20 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.20, 4.x prior to 4.4.10 or 5.x prior to 5.2.3. It is, therefore, affected by multiple vulnerabilities. - Various module chromes didn't properly process inputs, leading to XSS...

Joomla 3.9.x < 3.10.20 / 4.0.x < 4.4.10 / 5.0.x < 5.2.3 Joomla 5.2.3 Security & Bugfix Release (5919-joomla-5-2-3-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.9.x prior to 3.10.20, 4.0.x prior to 4.4.10, or 5.0.x prior to 5.2.3. It is, therefore, affected by a vulnerability. - Improper Access Controls allows access to protected views. CVE-2024-40749 No...

Joomla! Access Control Vulnerability (20250103)

Joomla! is prone to an improper access control vulnerability in multiple core views. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...