Joomla vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
161 matching records
- High8.6A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.Check if you run itEPSS 0.31%Jul 18, 2025
- High8.6A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.Check if you run itEPSS 0.35%Jul 18, 2025
- Critical9.8A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.45%Jul 18, 2025
- Critical9.8A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.45%Jul 18, 2025
- Critical9.3A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.Check if you run itEPSS 0.32%Jun 12, 2025
- Critical9.2Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.Check if you run itEPSS 0.56%Jun 11, 2025
- Medium6.7A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.Check if you run itEPSS 0.31%Jun 11, 2025
- High8.5A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered.Check if you run itEPSS 0.34%Jun 11, 2025
- Medium6.5A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered.Check if you run itEPSS 0.23%Jun 5, 2025
- Medium4.8A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered.Check if you run itEPSS 0.31%Jun 4, 2025
- Low3.8A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the product management area inCheck if you run itEPSS 0.25%Apr 21, 2025
- Unknownhelpdesk_pro_project helpdesk_pro Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 56.51%Sep 19, 2024
- UnknownWP Meta SEO plugin for WordPress Stored Cross-Site ScriptingPatch nowKEVEPSS 0.45%May 29, 2024
- Medium5.3Joomla! Improper Access Control VulnerabilityPatch nowKEVEPSS 99.81%Feb 16, 2023
- Unknowngmapfp gmapfp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 31.44%Apr 12, 2021
- Unknownjoomlaworks k2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.31%Apr 12, 2021
- Unknownmlwebtechnologies prayercenter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.75%Apr 12, 2021
- Unknownzh_baidumap_project zh_baidumap Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 57.70%Apr 12, 2021
- Unknowncodextrous b2j_contact Improper Input ValidationPatch nowKEVEPSS 3.57%Apr 12, 2021
- Unknowncreative-solutions creative_contact_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 91.86%Feb 8, 2020
- Critical9.8arkextensions jck_editor Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 82.98%Sep 20, 2018
- Critical9.8Joomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 99.83%May 17, 2017
- Critical9.8PHPMailer Command Injection VulnerabilityPatch nowKEVEPSS 99.71%Dec 30, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 81.14%Oct 28, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 97.25%Oct 28, 2016