Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored XSS.This issue aff…Check if you run itEPSS 0.18%Mar 25, 2026
- Critical9.5The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.Check if you run itEPSS 1.64%Feb 20, 2026
- Unknowngreatjoomla scriptegrator_plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.24%Feb 2, 2026
- Unknownpercha com_perchagallery Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 15.78%Dec 26, 2025
- Unknownjoomlaserviceprovider wsecure Improper Input ValidationPatch nowKEVEPSS 8.98%Oct 8, 2025
- Unknownarkextensions jck_editor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 82.98%Sep 14, 2025
- Medium4.9The RSFirewall! plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.1.42 via the get_local_filename() function.Check this weekEPSS 45.00%Jul 12, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows ReflectedCheck this weekEPSS 26.00%Jun 27, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS.Check this weekEPSS 25.00%Jun 27, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows SQL InjecCheck this weekEPSS 40.00%Jun 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPGYM allows PHP Local File Inclusion.Check this weekEPSS 67.00%Jun 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla School Management allows PHP Local File Inclusion.Check this weekEPSS 72.00%Jun 17, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows Blind SQL Injection.Check this weekEPSS 45.00%Jun 17, 2025
- Critical9.3A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.Check if you run itEPSS 0.32%Jun 12, 2025
- Critical9.2Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.Check if you run itEPSS 0.56%Jun 11, 2025
- Medium6.7A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.Check if you run itEPSS 0.31%Jun 11, 2025
- High8.5A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered.Check if you run itEPSS 0.34%Jun 11, 2025
- Medium6.5A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered.Check if you run itEPSS 0.22%Jun 5, 2025
- Medium4.8A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered.Check if you run itEPSS 0.30%Jun 4, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection.Check if you run itEPSS 0.33%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS.Check if you run itEPSS 0.28%May 23, 2025
- High8.8Incorrect Privilege Assignment vulnerability in mojoomla Hospital Management System allows Privilege Escalation.Check if you run itEPSS 0.36%May 23, 2025
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server.Check if you run itEPSS 0.42%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPAMS apartment-management allows Reflected XSS.This issue affects WPCheck if you run itEPSS 0.23%May 19, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a thCheck if you run itEPSS 0.56%May 19, 2025