PT-2023-9887 · Unknown · Gesellix Titlelink

Name of the Vulnerable Software and Affected Versions: gesellix titlelink affected versions not specified Description: A critical issue was found in gesellix titlelink on Joomla, affecting an unknown functionality of the file plugin content title.php. The manipulation of the phrase argument leads...

[20230102] - Core - Missing ACL checks for com_actionlogs

A missing ACL check allows non super-admin users to access comactionlogs...

[20230101] - Core - CSRF within post-installation messages

A missing token check causes a CSRF vulnerability in the handling of post-installation messages...

Joomla! Component EkRishta SQL Injection

An SQL injection vulnerability exists in Joomla! Component EkRishta. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla! 4.0.0 - 4.2.4 XSS Vulnerability

Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla! 4.x < 4.2.5 Cross-Site Scripting

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.2.5. It is, therefore, affected by a Cross-Site Scripting XSS due to inadequate filtering of potentially malicious user input in commedia. Note that the scanner has not tested for...

Joomla! CMS Cross-Site Scripting (CVE-2018-6377)

A cross-site scripting vulnerability exists in Joomla! Core. Successful exploitation results in the execution of arbitrary script code in the target user's browser...

CVE-2022-27914

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

CVE-2022-27914

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

Cross site scripting

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

CVE-2022-27914

CVE-2022-27914 affects Joomla! 4.0.0 through 4.2.4. The issue is a reflected XSS in com_media caused by inadequate filtering of user input. Impact is reflected XSS with low confidentiality/integrity impact and no availability impact per CVSS. Remediation: upgrade to Joomla! 4.2.5 or later (per ex...

CVE-2022-27914 [20221101] - Core - RXSS through reflection of user input in com_media

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

CVE-2022-27914 [20221101] - Core - RXSS through reflection of user input in com_media

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

CVE-2022-27914

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

Joomla 4.0.x < 4.2.5 Joomla 4.2.5 Security and Bug Fix release (5873-joomla-4-2-5-security-and-bug-fix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 4.2.5. It is, therefore, affected by a vulnerability. - Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia.. CVE-2022-27914...

PT-2022-18689 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 4.0.0 through 4.2.4 Description: An issue was discovered in Joomla! where inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in com media. Recommendations: For Joomla! versions 4.0...

Joomla! 跨站脚本漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! versions 4.0.0 through 4.2.4 that stems from insufficient filtering of user input...

[20221101] - Core - RXSS through reflection of user input in com_media

Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

Joomla! SQL Injection (CVE-2018-8045)

An SQL injection vulnerability exists in Joomla!. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Joomla! 4.0.0 - 4.2.3 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...