Vendor
Joomla! Project
576 known vulnerabilities in products by Joomla! Project, 2 of them actively exploited (CISA KEV).
Key figures
576
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
41
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2016-10033 | PHPMailer Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-23752 | [20230201] - Core - Improper access check in webservice endpoints In CISA KEV | 5.3 | |
| Critical | CVE-2017-8917 | Joomla! CMS: SQL Injection | 9.8 | |
| Critical | CVE-2016-10045 | PHPMailer Project PHPMailer: Code Execution | 9.8 | |
| Critical | CVE-2016-8869 | Joomla! CMS: Privilege Escalation | 9.8 | |
| Critical | CVE-2011-4908 | Joomla! TinyBrowser Plugin: Unrestricted File Upload | 9.8 | |
| Critical | CVE-2019-10945 | Joomla! CMS: security vulnerability | 9.8 | |
| Critical | CVE-2020-35613 | [20201104] - Core - SQL injection in com_users list view | 9.8 | |
| Critical | CVE-2019-12765 | Joomla! CMS: security vulnerability | 9.8 | |
| Critical | CVE-2011-4906 | Joomla! Tiny browser included with TinyMCE 3.0: Code Execution | 9.8 | |
| High | CVE-2018-8045 | Joomla! CMS: SQL Injection | 8.8 | |
| High | CVE-2016-8870 | Joomla! CMS: security vulnerability | 8.1 | |
| Critical | CVE-2017-14596 | Joomla! CMS: security vulnerability | 9.8 | |
| Critical | CVE-2019-11831 | TYPO3 PharStreamWrapper: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2017-16634 | Joomla! CMS: security vulnerability | 9.8 | |
| Medium | CVE-2024-21726 | [20240205] - Core - Inadequate content filtering within the filter code | 6.5 | |
| Critical | CVE-2018-6376 | Joomla! CMS: SQL Injection | 9.8 | |
| Medium | CVE-2024-21725 | [20240204] - Core - XSS in mail address outputs | 6.1 | |
| High | CVE-2016-9838 | Joomla! CMS: security vulnerability | 7.5 | |
| Critical | CVE-2018-11325 | Joomla! CMS: security vulnerability | 9.8 | |
| Medium | CVE-2019-11358 | Drupal core: security vulnerability | 6.1 | |
| High | CVE-2012-1563 | Joomla!: security vulnerability | 7.5 | |
| Medium | CVE-2021-26030 | [20210401] - Core - Escape xss in logo parameter error pages | 6.1 | |
| Medium | CVE-2021-23124 | [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute | 6.1 | |
| Critical | CVE-2018-15882 | Joomla! CMS: security vulnerability | 9.8 |
News
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Joomla\! | 427 | 2 |
| Bsq Sitestats | 6 | 0 |
| Rs Gallery2 | 4 | 0 |
| Com Beamospetition | 3 | 0 |
| Com Weblinks | 3 | 0 |