Sign in Sign up
JA · EN · FR
SecPulse

Joomla

🧱 Web Frameworks 📝 CMS 🏢 Vendors 📦 Products Related 81
slug: joomla

No explanation yet for this tag.

🔖 Related tags

WordPress5433 Apache1527 nginx174 Drupal150 Express131 Laravel130 Django122 React108 Vue.js96 Symfony89 Spring82 Angular44 Ruby on Rails42 Flask42 Next.js34 Magento75 phpMyFAQ38 Strapi8 TYPO35 Shopware3

🛡 Vulnerabilities tagged with this 81

Image ID Title
CVE-2026-48958 Vulnerability in Joomla (CVE-2026-48958)
CVE-2026-48953 Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48952 Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48951 Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48950 Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48949 Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48948 Vulnerability in Joomla (CVE-2026-48948)
CVE-2026-48947 Vulnerability in Joomla (CVE-2026-48947)
CVE-2017-20267 SQL Injection in Joomla (CVE-2017-20267)
CVE-2026-48905 Lack of input filtering leads to an XSS vector in the HTML filter code.
CVE-2026-48904 Vulnerability in joomla (CVE-2026-48904)
CVE-2026-48903 Cross-Site Scripting (XSS) in joomla (CVE-2026-48903)
CVE-2026-48902 Vulnerability in joomla (CVE-2026-48902)
CVE-2026-48901 Vulnerability in joomla (CVE-2026-48901)
CVE-2026-48900 Vulnerability in joomla (CVE-2026-48900)
CVE-2026-48899 An improper access check allows privilege escalation through the com_users batch task.
CVE-2026-48898 An improper access check allows privilege escalation through the com_users batch task.
CVE-2026-48897 Insufficient state checks lead to a vector that allows to bypass 2FA checks.
CVE-2026-48896 Insufficient state checks lead to a vector that allows to bypass 2FA checks.
CVE-2026-40384 Path Traversal in joomla (CVE-2026-40384)
CVE-2026-40383 An improper validation of user-supplied input leads to a local file inclusion vulnerability.
CVE-2026-35223 An improper access check allows unauthorized access to com_config webservice endpoints.
CVE-2026-35222 Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.
CVE-2026-35221 SQL Injection in joomla (CVE-2026-35221)
CVE-2026-35220 Cross-Site Request Forgery (CSRF) in joomla (CVE-2026-35220)
CVE-2026-30895 Lack of output escaping leads to a XSS vector in the readmore links for com_content.
CVE-2026-30894 Lack of output escaping leads to a XSS vector in the content history component.
CVE-2026-25901 Lack of output escaping leads to a XSS vector in the multilingual associations component.
CVE-2026-25900 Lack of output escaping leads to a XSS vector in the feed modules.
CVE-2025-63082 Cross-Site Scripting (XSS) in Joomla (CVE-2025-63082)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details