Description
An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 3.0.0-3.9.26 | — |
Unscored
CVE-2021-26033
EUVD-2021-12856GHSA-3247-q928-6mr7
[20210502] - Core - CSRF in AJAX reordering endpoint
Published May 26, 2021 · Updated Feb 25, 2026 · Assigned by Joomla