Skip to content
OpenAdvisories

Package · Packagist

joomla/joomla-cms

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-16725

    Joomla! XSS in Default Templates

    In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.

    joomla/joomla-cms Packagist
  • Medium 4.8
    CVE-2018-11326

    Joomla! XSS Vulnerability

    An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attac…

    joomla/joomla-cms Packagist
  • Medium —
    CVE-2011-2509

    Joomla! vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as demonstrated by the Itemid parameter to index.php; (2) the quer…

    joomla/joomla-cms Packagist
  • Medium —
    CVE-2010-1649

    Joomla! vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in ad…

    joomla/joomla-cms Packagist