Product by Open Source
Joomla Core
16 known vulnerabilities in Joomla Core (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-92222 | Joomla! CMS: Server-Side Request Forgery (SSRF) | 8.0 | |
| High | CVE-2026-92227 | Joomla! CMS: Improper Authentication | 7.5 | |
| High | CVE-2026-90906 | Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 | 8.3 | |
| High | CVE-2026-90915 | Joomla! CMS: Path Traversal | 6.5 | |
| High | CVE-2026-92231 | Joomla! CMS: Cross-site Scripting | 6.7 | |
| High | CVE-2026-92232 | Joomla! CMS: Cross-site Scripting | 6.5 | |
| Medium | CVE-2026-90907 | Joomla! CMS: Authorization Bypass Through User-Controlled Key | 5.3 | |
| High | CVE-2026-92226 | Joomla! CMS: Improper Access Control | 6.0 | |
| Medium | CVE-2026-92224 | Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 | 6.7 | |
| Medium | CVE-2026-92225 | Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 | 6.7 | |
| High | CVE-2026-90913 | Joomla! CMS: Improper Access Control | 5.5 | |
| Medium | CVE-2026-90918 | Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 | 5.3 | |
| Medium | CVE-2026-90917 | Joomla! CMS: Improper Access Control | 5.3 | |
| Medium | CVE-2026-90914 | Joomla! CMS: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-90916 | Joomla! CMS: Improper Access Control | 2.7 | |
| Medium | CVE-2026-92223 | Joomla! CMS: Improper Access Control | 3.8 |