Lucene search
+L

19186 matches found

NCSC
NCSC
added 2024/02/22 12:00 a.m.13 views

Vulnerabilities fixed in Joomla!

Vulnerabilities have been fixed in Joomla! CMS. A malicious person can exploit the vulnerabilities to bypass a security measure bypass or perform a Cross-Site-Scripting XSS attack. Such an attack can lead to execution of arbitrary code in the victim's browser, or access to sensitive data in the...

6.5CVSS7AI score0.48839EPSS
SaveExploits1
NVD
NVD
added 2024/02/21 8:15 a.m.20 views

CVE-2024-24837

Cross-Site Request Forgery CSRF vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; ...

4.3CVSS4.6AI score0.00276EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/21 8:15 a.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; ...

4.3CVSS7.4AI score0.00276EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/21 7:18 a.m.135 views

CVE-2024-24837

CVE-2024-24837 is a CSRF vulnerability affecting FG Joomla to WordPress, FG Drupal to WordPress, and FG PrestaShop to WooCommerce plugins. Connected sources confirm concrete details: FG Joomla to WordPress <= 4.15.0 is affected, with a fix in 4.17.0; FG Drupal to WordPress

4.3CVSS6.3AI score0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/21 7:18 a.m.17 views

CVE-2024-24837 Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins

Cross-Site Request Forgery CSRF vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; ...

4.3CVSS6.9AI score0.00276EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/21 7:18 a.m.41 views

CVE-2024-24837 Cross-Site Request Forgery (CSRF) vulnerability in FG PrestaShop, FG Drupal and FG Joomla WordPress plugins

Cross-Site Request Forgery CSRF vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; ...

4.3CVSS4.9AI score0.00276EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/02/21 12:00 a.m.106 views

Joomla! 1.5.x < 4.4.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 4.4.3 or 5.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - An insufficient session expiration in MFA management views. CVE-2024-21722 - An open redirect i...

6.5CVSS5.3AI score0.48839EPSS
SaveExploits1References11
Tenable Nessus
Tenable Nessus
added 2024/02/21 12:00 a.m.79 views

Joomla! 5.x < 5.0.3 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 4.4.3 or 5.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - An insufficient session expiration in MFA management views. CVE-2024-21722 - An open redirect i...

6.5CVSS5.3AI score0.48839EPSS
SaveExploits1References11
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2024/02/20 12:00 a.m.28 views

[20240701] - Core - XSS in accessible media selection field

Inadequate input validation leads to XSS vulnerabilities in the accessiblemedia field...

6.1CVSS5.8AI score0.00442EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/02/20 12:00 a.m.43 views

Joomla 1.5.x < 3.10.15 / 4.0.x < 4.4.3 / 5.0.x < 5.0.3 Multiple Vulnerabilities (5904-joomla-5-0-3-and-4-4-3-security-and-bug-fix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 3.10.15, 4.0.x prior to 4.4.3, or 5.0.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - The MFA management features did not properly terminate existing user...

6.5CVSS5.9AI score0.48839EPSS
SaveExploits1References11
GithubExploit
GithubExploit
added 2024/02/19 10:27 a.m.358 views

Exploit for Improper Access Control in Joomla Joomla\!

Joomla! options Arguments - url: Root URL base...

5.3CVSS5.9AI score0.99827EPSS
SaveExploits43
OSV
OSV
added 2024/02/15 9:15 p.m.10 views

CVE-2024-21728

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky osTicket Bridge by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return paramete...

6.1CVSS5.8AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/15 9:15 p.m.30 views

CVE-2024-21728

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky osTicket Bridge by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return paramete...

6.1CVSS6.4AI score0.0032EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/15 9:15 p.m.31 views

Open redirect

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky osTicket Bridge by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return paramete...

7.2AI score0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/15 8:20 p.m.29 views

CVE-2024-21728 Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky osTicket Bridge by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return paramete...

6.8AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/15 8:20 p.m.120 views

CVE-2024-21728

CVE-2024-21728 affects osTicky (osTicket Bridge) for Joomla 3.x, specifically osTicky2

6.1CVSS6.6AI score0.0032EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/15 8:20 p.m.42 views

CVE-2024-21728 Extension - smartcalc.es - Open redirect vulnerability in osTicky component for Joomla <= 2.2.8

An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky osTicket Bridge by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return paramete...

6.7AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/15 7:15 a.m.31 views

CVE-2024-21727

XSS vulnerability in DP Calendar component for Joomla...

6.1CVSS5.9AI score0.00309EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/15 7:15 a.m.9 views

CVE-2024-21727

XSS vulnerability in DP Calendar component for Joomla...

6.1CVSS5.8AI score0.00309EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/15 7:15 a.m.27 views

Cross site scripting

XSS vulnerability in DP Calendar component for Joomla...

6.3AI score0.00309EPSS
SaveExploits0References1
Rows per page
Query Builder