Joomla vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
161 matching records
- Medium5.1Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter…Check if you run itEPSS 0.22%Apr 9, 2026
- Medium5.1Joomla JLex Review 6.0.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the review_id URL parameter.Check if you run itEPSS 0.19%Apr 9, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.55%Apr 7, 2026
- High8.6An improper access check allows unauthorized access to webservice endpoints.Check if you run itEPSS 0.41%Apr 1, 2026
- High8.6Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium5.9Lack of output escaping for article titles leads to XSS vectors in various locations.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the multilingual associations component.Check if you run itEPSS 0.22%Apr 1, 2026
- Medium6.9Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.Check if you run itEPSS 0.35%Apr 1, 2026
- Medium6.3The ajax component was excluded from the default logged-in-user check in the administrative area.Check if you run itEPSS 0.26%Apr 1, 2026
- Critical9.5The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point.Check if you run itEPSS 1.75%Feb 20, 2026
- Critical9.2Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosureCheck if you run itEPSS 0.41%Feb 6, 2026
- Medium5.9Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.Check if you run itEPSS 0.21%Jan 6, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the pagebreak plugin.Check if you run itEPSS 0.21%Jan 6, 2026
- Medium5.3Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method.Check if you run itEPSS 0.27%Sep 30, 2025
- Medium4.8Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class.Check if you run itEPSS 0.31%Sep 30, 2025
- High8.5A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered.Check if you run itEPSS 0.31%Aug 25, 2025
- High8.5A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered.Check if you run itEPSS 0.31%Aug 25, 2025
- High8.7A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Aug 15, 2025
- High8.5A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered.Check if you run itEPSS 0.32%Aug 15, 2025
- Critical9.2An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered.Check if you run itEPSS 0.40%Aug 15, 2025
- Critical9.4A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered.Check if you run itEPSS 0.48%Jul 28, 2025
- Medium5.3A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered.Check if you run itEPSS 0.40%Jul 18, 2025
- Medium5.1A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered.Check if you run itEPSS 0.42%Jul 18, 2025
- Medium6.9A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered.Check if you run itEPSS 0.45%Jul 18, 2025
- Medium5.1A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered.Check if you run itEPSS 0.44%Jul 18, 2025