Lucene search
+L

284 matches found

EUVD
EUVD
added yesterday5 views

EUVD-2026-46060

The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses...

6.9CVSS5.2AI score
Exploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-46057

The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS...

9.4CVSS5.2AI score
Exploits0References1
CVE
CVE
added yesterday6 views

CVE-2026-60034

CVE-2026-60034 – Affected: Joomla extension JMedia (theexpert.com)

9.4CVSS5.2AI score
Exploits0References1
Cvelist
Cvelist
added yesterday14 views

CVE-2026-60034 Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0

The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS...

9.4CVSS
Exploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-46056

The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...

8.7CVSS5.2AI score
Exploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-60030

The CVE-2026-60030 entry concerns Joomla’s Quix Page Builder Pro (thethemexpert extension) with a broken access control in media management. Authenticated users can upload media irrespective of their permissions. The CVE list notes this affects versions before 6.2.1; remediation is to update to 6...

8.7CVSS5.3AI score
Exploits0References1
Cvelist
Cvelist
added yesterday13 views

CVE-2026-60030 Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1

The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...

8.7CVSS
Exploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-46055

The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses...

5.1CVSS5.2AI score
Exploits0References1
CVE
CVE
added yesterday10 views

CVE-2026-60033

Affected product: Joomla extension JMedia (versions

5.1CVSS5.3AI score
Exploits0References1
Cvelist
Cvelist
added yesterday14 views

CVE-2026-60033 Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0

The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses...

5.1CVSS
Exploits0References1
CVE
CVE
added yesterday7 views

CVE-2026-60028

The CVE-2026-60028 entry concerns the Joomla extension Quix Page Builder Pro, vulnerable to an authenticated stored XSS due to unescaped output and unsanitised SVG. The issue affects Quix Page Builder Pro (prior to version 6.2.1) where an authenticated builder user can inject scripts that execute...

8.6CVSS5.2AI score
Exploits0References1
NVD
NVD
added 4 days ago9 views

CVE-2026-58149

The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses...

5.3CVSS0.00146EPSS
Exploits0References1
Cvelist
Cvelist
added 4 days ago35 views

CVE-2026-58148 Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla < 8.0.53

The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS0.00318EPSS
Exploits0References1
EUVD
EUVD
added 4 days ago7 views

EUVD-2026-45184

The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets...

5.3AI score0.00146EPSS
Exploits0References1
CVE
CVE
added 4 days ago14 views

CVE-2026-60024

The CVE-2026-60024 entry concerns the Joomla extension Events Booking prior to version 5.8.0, where a default insecure configuration allowed unauthenticated users to upload media assets. Attack context is not further detailed in the supplied documents, but CVSS 3.1 reflects a high impact on confi...

9.8CVSS5.3AI score0.00146EPSS
Exploits0References1
Cvelist
Cvelist
added 4 days ago38 views

CVE-2026-60024 Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0

The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets...

0.00146EPSS
Exploits0References1
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-45200

The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses...

5.3AI score0.00146EPSS
Exploits0References1
CVE
CVE
added 4 days ago10 views

CVE-2026-58149

The CVE describes a vulnerability in the Joomla extension Events Booking (versions before 5.8.0) that allows unauthenticated user enumeration to retrieve account usernames and email addresses. Based on the sources, the issue is an unauthenticated access flaw exposing user data (confidentiality im...

5.3CVSS5.3AI score0.00146EPSS
Exploits0References1
Cvelist
Cvelist
added 4 days ago37 views

CVE-2026-58149 Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0

The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses...

0.00146EPSS
Exploits0References1
EUVD
EUVD
added 4 days ago6 views

EUVD-2026-45198

The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection...

5.3AI score0.00097EPSS
Exploits0References1
Rows per page
Query Builder