Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-71573 EUVD-2026-61034GHSA-jm8r-mhmw-h747

Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2

Published Aug 18, 2026 · Updated Aug 19, 2026 · Assigned by Joomla

Description

Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests.

Affected products

VendorProductAffectedFixed
Joomla! Project Joomla! CMS 4.0.0-5.4.6, 6.0.0-6.1.2 —

Advisories 1

References