Skip to content
OpenAdvisories

Package · Packagist

joomla/framework

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2

    Joomla RCE Vulnerability

    An issue was discovered in Joomla! before 3.8.13. com_joomlaupdate allows the execution of arbitrary code. The default ACL config enabled the ability of Administrator-level users to access com_joomlaupdate and trigger code execution.

  • High —

    Joomla! Open Redirect vulnerability

    Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.