EUVD-2025-22442

Malicious code in bioql PyPI...

EUVD-2025-21871

Malicious code in bioql PyPI...

CVE-2025-40636

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-40636 SQL injection in the mod_vvisit_counter module

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-40636 SQL injection in the mod_vvisit_counter module

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-40636

The CVE-2025-40636 entry describes a SQL injection in the Joomla module mod_vvisit_counter (version v2.0.4j3 ). The vulnerability stems from improper handling of the cookie parameter cip_vvisitcounter , allowing an attacker to retrieve database content at endpoints where the plugin counts visits....

Joomla! 4.x < 4.4.14 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.14 or 5.x prior to 5.3.4. It is, therefore, affected by multiple vulnerabilities. - Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in...

Joomla! 5.x < 5.3.4 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.14 or 5.x prior to 5.3.4. It is, therefore, affected by multiple vulnerabilities. - Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in...

Joomla module mod_vvisit_counter SQL注入漏洞

Joomla module modvvisitcounter is a third-party extension module for Joomla! CMS by the individual developer Vinaora. A SQL injection vulnerability exists in Joomla module modvvisitcounter version v2.0.4j3, which stems from improper handling of the cipvvisitcounter cookie parameter, which could...

PT-2025-40515

Name of the Vulnerable Software and Affected Versions Joomla module mod vvisit counter version 2.0.4j3 Description A SQL injection issue exists in the mod vvisit counter module. An attacker can retrieve database content through the cip vvisitcounter cookie at any endpoint where the plugin tracks...

Joomla! XSS Vulnerability (20250901)

Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

Joomla! User Enumeration Vulnerability (20250902)

Joomla! is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescripti...

Joomla! CMS vulnerable to XSS via the input filter

Improper handling of input could lead to a cross-site scripting XSS vector in the checkAttribute method of the input filter framework class...

GHSA-FM22-G2Q9-J3PW Joomla! CMS vulnerable to XSS via the input filter

Improper handling of input could lead to a cross-site scripting XSS vector in the checkAttribute method of the input filter framework class...

Cross-site Scripting (XSS)

Overview joomla/filter is a Joomla Filter Package Affected versions of this package are vulnerable to Cross-site Scripting XSS via the checkAttribute method. An attacker can execute arbitrary scripts in the context of the affected application by submitting specially crafted input that bypasses...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477

The Joomla! CMS is vulnerable to a user enumeration vector due to the improper handling of authentication requests within the passkey authentication method . This flaw allows an attacker to potentially identify valid users on the system. The vulnerability affects Joomla! 4.x versions prior to 4.4...

CVE-2025-54476 Joomla! Core - [20250901] Inadequate content filtering within the checkAttribute filter code

Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class...

CVE-2025-54476

CVE-2025-54476 describes an XSS vulnerability in Joomla!’s input filter framework, specifically in the checkAttribute method. The initial CVE entry reports improper handling of input leading to an XSS vector, with a CVSS 4.0 base score of 4.8 (Medium) and Network attack vector with High privilege...