Joomla! Security Vulnerabilities and Issues — Joomla! CVE List

Lucene search

JoomlaJoomla!

3 matches found

CVE•added 2021/05/26 11:15 a.m.•60 views

CVE-2021-26033

An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.

6.5CVSS6.4AI score0.00009EPSS

CVE•added 2021/05/26 11:15 a.m.•56 views

CVE-2021-26032

An issue was discovered in Joomla! 3.0.0 through 3.9.26. HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors.

6.1CVSS5.8AI score0.0161EPSS

CVE•added 2021/05/26 11:15 a.m.•50 views

CVE-2021-26034

An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in data download endpoints in com_banners and com_sysinfo.

6.5CVSS6.4AI score0.00009EPSS