ZeroDay Findings
Sign inSign up

Findings

CVE-2026-73372

[20260809] - Core - Improper ACL checks when injection schema.org contact data

Published Aug 17, 2026 · Joomla Joomla

Project: Joomla! SubProject: CMS Impact: Low Severity: Low Probability: Low Versions: 5.1.0-5.4.7,6.0.0-6.1.2 Exploit type: Incorrect Access Control Reported Date: 2026-07-31 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73372 Description An improper access check injects contact information for unaccessible contact items into schema.org snippets. Affected Installs Joomla! CMS versions 5.1.0-5.4.7, 6.0.0-6.1.2 Solution Upgrade to version 5.4.8, 6.1.3 Contact The JSST at the Joomla! Security Centre . Reported By: Stefan Wendhausen

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 17, 2026 · Joomla Security

    Detected

    Project: Joomla! SubProject: CMS Impact: Low Severity: Low Probability: Low Versions: 5.1.0-5.4.7,6.0.0-6.1.2 Exploit type: Incorrect Access Control Reported Date: 2026-07-31 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73372 Description An improper access check injects contact information for unaccessible contact items into schema.org snippets. Affected Installs Joomla! CMS versions 5.1.0-5.4.7, 6

Sources

  • CVE.orgVulnerability recordCVE-2026-73372

    Official CVE identifier

    cve.org
  • Joomla SecurityVendor advisoryCVE-2026-73372

    Project: Joomla! SubProject: CMS Impact: Low Severity: Low Probability: Low Versions: 5.1.0-5.4.7,6.0.0-6.1.2 Exploit type: Incorrect Access Control Reported Date: 2026-07-31 Fixed Date: 2026-08-18 CVE Number: CVE-2026-73372 Description An improper access check injects contact in

    developer.joomla.org