Skip to content
OpenAdvisories
Unscored CVE-2022-27910 EUVD-2022-32398GHSA-cqc4-vj4q-xgg6

Extension - Joomlatools - DOCman - Reflected Cross-Site Scripting (XSS) in an image upload function

Published Jul 10, 2022 · Updated Feb 25, 2026 · Assigned by Joomla

Vendor: Joomlatools Product: DOCman

Description

In Joomla component 'Joomlatools - DOCman 3.5.13 (and likely most versions below)' are affected to an reflected Cross-Site Scripting (XSS) in an image upload function

Affected products

VendorProductAffectedFixed
Joomlatools DOCman <=3.5.13 —

References