CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

CVE-2020-24599

An issue was discovered in Joomla! before 3.9.21. Lack of escaping in modlatestactions allows XSS attacks...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

Open redirect

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

Cross site scripting

An issue was discovered in Joomla! before 3.9.21. Lack of escaping in modlatestactions allows XSS attacks...

CVE-2020-24598

CVE-2020-24598 is an open redirect vulnerability in Joomla! before 3.9.21, arising from insufficient input validation in the com_content vote feature. The initial descriptions and connected sources consistently describe an input-validation weakness leading to an open redirect, but no remediation ...

CVE-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

CVE-2020-24599

CVE-2020-24599 affects Joomla! versions before 3.9.21 through a lack of escaping in mod_latestactions, enabling Cross-Site Scripting (XSS). The issue is documented across multiple feeds (NVD, OSV, CNVD, etc.) with a common description: an input/escape failure in mod_latestactions leads to XSS. CV...

CVE-2020-24599

An issue was discovered in Joomla! before 3.9.21. Lack of escaping in modlatestactions allows XSS attacks...

PT-2020-15759 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.21 Description: The issue is related to a lack of input validation in the vote feature of com content, which leads to an open redirect. Recommendations: For versions prior to 3.9.21, update to version 3.9.21 or...

Vulnerabilities fixed in Joomla!

Joomla has fixed a number of vulnerabilities in Joomla! CMS. A remote malicious party could potentially exploit the vulnerabilities to perform a cross-site scripting attack. It is also possible for a malicious party to gain access through a path-traversal gain access to data outside the web-root...

Adagency Cross-Site Scripting Vulnerability in Joomla!

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. Adagency cross-site scripting vulnerability in Joomla! An attacker can exploit this vulnerability to execute client-side code...

PT-2020-15760 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.21 Description: A security issue was found in the mod latestactions module, where the lack of proper escaping allows for cross-site scripting XSS attacks. Recommendations: For versions prior to 3.9.21, update to...

Joomla Adagency 6.1.2 Cross Site Scripting

Exploit Title: Joomla! Adagency V 6.1.2 Cross Site Scripting Date: 24.07.2020 Author: Vincent666 ibn Winnie Software Link: https://adagency.ijoomla.com/ Tested on: Windows 10 Web Browser: Mozilla Firefox Blog : https://pentest-vincent.blogspot.com/...

Joomla! 2.5.x < 3.9.20 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.20. It is, therefore, affected by multiple vulnerabilities. - A missing token check in the ajaxinstall endpoint cominstaller causes a CSRF vulnerability. - Missing validation...

Exploit for CVE-2020-13424

Exploit Title: Joomla! Plugin XCloner Backup 3.5.3 - Local File...

Unspecified vulnerability in Joomla! (CNVD-2020-44909)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in Joomla! 3.9.19 and earlier versions, which can be exploited by an attacker to modify internal read-only fields in...

Joomla 2.5.x < 3.9.20 Multiple Vulnerabilities (5814-joomla-3-9-20)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.20. It is, therefore, affected by multiple vulnerabilities. - A missing token check in the ajaxinstall endpoint cominstaller causes a CSRF vulnerability. 20200701 - Missing...

Joomla! <= 3.9.19 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...