Advisories · Technology

Joomla! Project Joomla! CMS.

Every CVE that names Joomla! Project Joomla! CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-23125 CVE record

[20210103] - Core - XSS in com_tags image parameters
- Joomla! Project Joomla! CMS
Not analysed yet 12 Jan 2021
CVE-2021-23124 CVE record

[20210102] - Core - XSS in mod_breadcrumbs aria-label attribute
- Joomla! Project Joomla! CMS
Not analysed yet 12 Jan 2021
CVE-2021-23123 CVE record

[20210101] - Core - com_modules exposes module names
- Joomla! Project Joomla! CMS
Not analysed yet 12 Jan 2021
CVE-2020-35616 CVE record

[20201107] - Core - Write ACL violation in multiple core views
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020
CVE-2020-35615 CVE record

[20201106] - Core - CSRF in com_privacy emailexport feature
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020
CVE-2020-35614 CVE record

[20201105] - Core - User Enumeration in backend login
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020
CVE-2020-35613 CVE record

[20201104] - Core - SQL injection in com_users list view
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020
CVE-2020-35612 CVE record

[20201103] - Core - Path traversal in mod_random_image
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020
CVE-2020-35611 CVE record

[20201102] - Core - Disclosure of secrets in Global Configuration page
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020
CVE-2020-35610 CVE record

[20201101] - Core - com_finder ignores access levels on autosuggest
- Joomla! Project Joomla! CMS
Not analysed yet 28 Dec 2020