271 matches found
CVE-2025-22209
A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature...
CVE-2025-22209
CVE-2025-22209 (JS Jobs Joomla plugin) affects JS Jobs plugin versions 1.1.5–1.4.3 for Joomla. The underlying issue is a SQL injection in the Employer Payment History search feature, exploitable by an authenticated administrator via the searchpaymentstatus parameter. Affected component/file: the ...
CVE-2024-40745 Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8...
Joomla! Security Vulnerabilities
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! that stems from insufficient input validation and can lead to a cross-site scripting XSS vulnerability...
CMS Security Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! CMS that stems from inadequate content filtering...
CMS Security Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! CMS that stems from the MFA management feature failing to properly terminate an existing user session when the user's MFA method has been modified...
PT-2023-26265 · Joomla · Onevote
Name of the Vulnerable Software and Affected Versions: oneVote component for Joomla affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. It allows for XSS targeting non-script elements...
PT-2023-26264 · Hikashop.Com +1 · Hikashop Component For Joomla +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for SQL Injection, which can potentially be...
Joomla! 1.6.0 SQL Injection
According to its self-reported version, the detected Joomla! application version is 1.6.0 and is affected by an SQL Injection via the filterorder and filerorderDir parameters. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...
Design/Logic Flaw
An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute force attacks against MFA methods...
Joomla! 4.0.0 < 4.2.8 Broken Access Control
A broken access control allows unauthorized access to webservice endpoints allowing access to sensitive information such as database login information. No source data...
Joomla! vulnerable to Cross-site Scripting
Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
GHSA-5XMG-W578-GQ5J Joomla! Cross-site Scripting vulnerability
Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
GHSA-FJ57-VHRC-73R7 Joomla! vulnerable to Cross-site Scripting
Multiple cross-site scripting XSS vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php...
GHSA-VCQ7-X4WR-W2MJ Joomla! vulnerable to Cross-site Scripting
Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the comcontact component, as demonstrated by the Itemid parameter to index.php; 2 the query string to the comcontent component, as...
GHSA-MXR8-PCPG-M23J Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors...
Design/Logic Flaw
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components...
adblock detector nordmograph
Malicious script New in 2.1 : Miner feature discontinued This is a security release for the 3.x series of Joomla! This release fixes one low level security issues...
Joomla! 3.x < 3.9.25 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.9.25. It is, therefore, affected by multiple vulnerabilities. - Usage of the insecure rand function within the process of generating the 2FA secret. CVE-2021-23126 - Usage of an...
