Cross site scripting

A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla...

Sql injection

SQLi vulnerability in S5 Register module for Joomla...

Cross site scripting

A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla...

Cross site scripting

A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla...

Cross site scripting

A reflected XSS vulnerability was discovered in the LivingWord component for Joomla...

Cross site scripting

A reflected XSS vulnerability was discovered in the Quickform component for Joomla...

CVE-2023-40627

Technical details (affected products, versions, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and trusted sources to obtain concrete information.

CVE-2023-40627 Extension - MLWebTechnologies - Reflected XSS in LivingWord component for Joomla 1.0.0-3.0.0

A reflected XSS vulnerability was discovered in the LivingWord component for Joomla...

CVE-2023-40659

Affected product: Easy Quick Contact module for Joomla. Vulnerability: reflected XSS in the Easy Quick Contact module. Root cause: not explicitly detailed beyond a reflected XSS flaw. Impact (per sources): enables cross-site scripting in victims’ browsers; CVSS v3.1 base score 6.1 (MEDIUM) with N...

CVE-2023-40659 Extension - joomboost.com - Reflected XSS in Easy Quick Contact module for Joomla 1.0.0-1.3.0

A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla...

CVE-2023-40658

The CVE 2023-40658 entry concerns a reflected Cross-Site Scripting (XSS) vulnerability in the Clicky Analytics Dashboard module for Joomla. Affected component: Clicky Analytics Dashboard module for Joomla; vulnerability type: reflected XSS described across multiple sources (NVD, Red Hat, CVE list...

CVE-2023-40658 Extension - deconf.net - Reflected XSS in Clicky Analytics Dashboard module for Joomla 1.0.0-1.3.1

A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla...

CVE-2023-40629 Extension - king-products.net - SQLi vulnerability in LMS Lite component for Joomla 1.0.0-3.3.0.1

SQLi vulnerability in LMS Lite component for Joomla...

CVE-2023-40629

The CVE-2023-40629 entry describes a SQL injection vulnerability in the Joomla LMS Lite component. Affected software: LMS Lite for Joomla (extension). Vulnerable element: the LMS Lite component code handling input likely reused in SQL queries; exact vulnerable file/parameter is not specified in t...

CVE-2023-40628

CVE-2023-40628 describes a reflected XSS in the Extplorer component for Joomla. Affected versions are listed as 1.0.0–2.1.15. According to the CVE metadata, the vulnerability has CVSS3.1 Base Score 6.1 (Medium), with/attack vector: NETWORK, attack complexity: LOW, privileges required: NONE, user ...

CVE-2023-40628 Extension - Extplorer.net - Reflected XSS in Extplorer component for Joomla 1.0.0-2.1.15

A reflected XSS vulnerability was discovered in the Extplorer component for Joomla...

CVE-2023-49707 Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0

SQLi vulnerability in S5 Register module for Joomla...

CVE-2023-49708 Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9

SQLi vulnerability in Starshop component for Joomla...

CVE-2023-49708

CVE-2023-49708 is a SQL injection vulnerability in the Starshop component for Joomla. The affected entry indicates a network-exposed vulnerability with no privileges required and no user interaction, yielding a CVSS v3.1 base score of 9.8 (Confidentiality/Integrity/Availability impact: HIGH). The...

CVE-2023-40656

CVE-2023-40656 is a reflected XSS vulnerability in Joomla’s Quickform component. Across sources, the issue is described as a reflected XSS in Quickform, affecting Joomla extensions (notably plas­ma-web.ru listing) for versions 1.0.0–3.3.01. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A...