agentprime: joomla-project-joomla-cms

agentprime: joomla-project-joomla-cmsEvery new CVE for joomla-project-joomla-cms.https://agentprime.io/CVE-2026-90915: Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90915/https://agentprime.io/advisories/CVE-2026-90915/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:45:45 GMTCVECVE-2026-92226: Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92226/https://agentprime.io/advisories/CVE-2026-92226/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:45:40 GMTCVECVE-2026-92224: Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92224/https://agentprime.io/advisories/CVE-2026-92224/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:43:40 GMTCVECVE-2026-90907: Joomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90907/https://agentprime.io/advisories/CVE-2026-90907/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:43:24 GMTCVECVE-2026-90914: Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90914/https://agentprime.io/advisories/CVE-2026-90914/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:42:23 GMTCVECVE-2026-92231: Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92231/https://agentprime.io/advisories/CVE-2026-92231/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:40:58 GMTCVECVE-2026-90918: Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90918/https://agentprime.io/advisories/CVE-2026-90918/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:38:58 GMTCVECVE-2026-92222: Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92222/https://agentprime.io/advisories/CVE-2026-92222/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:38:49 GMTCVECVE-2026-92223: Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92223/https://agentprime.io/advisories/CVE-2026-92223/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:38:34 GMTCVECVE-2026-90917: Joomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90917/https://agentprime.io/advisories/CVE-2026-90917/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:38:00 GMTCVECVE-2026-92225: Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92225/https://agentprime.io/advisories/CVE-2026-92225/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:37:05 GMTCVECVE-2026-92227: Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92227/https://agentprime.io/advisories/CVE-2026-92227/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:36:45 GMTCVECVE-2026-92232: Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-92232/https://agentprime.io/advisories/CVE-2026-92232/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:36:37 GMTCVECVE-2026-90916: Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90916/https://agentprime.io/advisories/CVE-2026-90916/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:36:35 GMTCVECVE-2026-90913: Joomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90913/https://agentprime.io/advisories/CVE-2026-90913/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:36:15 GMTCVECVE-2026-90906: Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3https://agentprime.io/advisories/CVE-2026-90906/https://agentprime.io/advisories/CVE-2026-90906/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:34:27 GMTCVECVE-2026-71573: Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-71573/https://agentprime.io/advisories/CVE-2026-71573/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:09:47 GMTCVECVE-2026-72531: Joomla! Core - [20260804] - Improper ACL checks for custom fields webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-72531/https://agentprime.io/advisories/CVE-2026-72531/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:08:48 GMTCVECVE-2026-73336: Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-73336/https://agentprime.io/advisories/CVE-2026-73336/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:06:00 GMTCVECVE-2026-73372: Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-73372/https://agentprime.io/advisories/CVE-2026-73372/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:05:57 GMTCVECVE-2026-71572: Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-71572/https://agentprime.io/advisories/CVE-2026-71572/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:05:56 GMTCVECVE-2026-73337: Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-73337/https://agentprime.io/advisories/CVE-2026-73337/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:04:51 GMTCVECVE-2026-73371: Joomla! Core - [20260808] - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-73371/https://agentprime.io/advisories/CVE-2026-73371/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:04:11 GMTCVECVE-2026-72532: Joomla! Core - [20260805] - Improper ACL checks for category webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-72532/https://agentprime.io/advisories/CVE-2026-72532/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:03:44 GMTCVECVE-2026-73373: Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-73373/https://agentprime.io/advisories/CVE-2026-73373/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:03:43 GMTCVECVE-2026-71574: Joomla! Core - [20260803] - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2https://agentprime.io/advisories/CVE-2026-71574/https://agentprime.io/advisories/CVE-2026-71574/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 16:02:54 GMTCVECVE-2026-48952: Joomla! Core - [20260706] - XSS in com_installerhttps://agentprime.io/advisories/CVE-2026-48952/https://agentprime.io/advisories/CVE-2026-48952/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:33:39 GMTCVECVE-2026-48947: Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpointshttps://agentprime.io/advisories/CVE-2026-48947/https://agentprime.io/advisories/CVE-2026-48947/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:32:45 GMTCVECVE-2026-48958: Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpointshttps://agentprime.io/advisories/CVE-2026-48958/https://agentprime.io/advisories/CVE-2026-48958/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:32:35 GMTCVECVE-2026-48950: Joomla! Core - [20260704] - XSS in com_templateshttps://agentprime.io/advisories/CVE-2026-48950/https://agentprime.io/advisories/CVE-2026-48950/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:31:46 GMTCVECVE-2026-48955: Joomla! Core - [20260709] - Incorrect Access Control in com_workflowhttps://agentprime.io/advisories/CVE-2026-48955/https://agentprime.io/advisories/CVE-2026-48955/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:31:35 GMTCVECVE-2026-48956: Joomla! Core - [20260710] - Incorrect Access Control in com_moduleshttps://agentprime.io/advisories/CVE-2026-48956/https://agentprime.io/advisories/CVE-2026-48956/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:31:34 GMTCVECVE-2026-48957: Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpointshttps://agentprime.io/advisories/CVE-2026-48957/https://agentprime.io/advisories/CVE-2026-48957/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:30:38 GMTCVECVE-2026-48951: Joomla! Core - [20260705] - XSS in various modalreturn layoutshttps://agentprime.io/advisories/CVE-2026-48951/https://agentprime.io/advisories/CVE-2026-48951/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:30:24 GMTCVECVE-2026-48953: Joomla! Core - [20260707] - XSS in the generic image output layouthttps://agentprime.io/advisories/CVE-2026-48953/https://agentprime.io/advisories/CVE-2026-48953/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:30:00 GMTCVECVE-2026-48948: Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf downloadhttps://agentprime.io/advisories/CVE-2026-48948/https://agentprime.io/advisories/CVE-2026-48948/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:29:47 GMTCVECVE-2026-48949: Joomla! Core - [20260703] - XSS in MFA method managementhttps://agentprime.io/advisories/CVE-2026-48949/https://agentprime.io/advisories/CVE-2026-48949/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:29:33 GMTCVECVE-2026-48954: Joomla! Core - [20260708] - XSS through language overrideshttps://agentprime.io/advisories/CVE-2026-48954/https://agentprime.io/advisories/CVE-2026-48954/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 17:29:28 GMTCVECVE-2026-35221: Joomla! Core - [20260506] - Authenticated blind SQLi in com_finderhttps://agentprime.io/advisories/CVE-2026-35221/https://agentprime.io/advisories/CVE-2026-35221/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:46:10 GMTCVECVE-2026-48896: Joomla! Core - [20260511] - MFA Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-48896/https://agentprime.io/advisories/CVE-2026-48896/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:45:55 GMTCVECVE-2026-35220: Joomla! Core - [20260505] - CSRF in user activation endpointhttps://agentprime.io/advisories/CVE-2026-35220/https://agentprime.io/advisories/CVE-2026-35220/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:45:19 GMTCVECVE-2026-40383: Joomla! Core - [20260509] - LFI in HTMLView layout parameterhttps://agentprime.io/advisories/CVE-2026-40383/https://agentprime.io/advisories/CVE-2026-40383/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:45:14 GMTCVEcriticalCVE-2026-35222: Joomla! Core - [20260507] - Authenticated blind SQLi in com_tagshttps://agentprime.io/advisories/CVE-2026-35222/https://agentprime.io/advisories/CVE-2026-35222/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:45:13 GMTCVECVE-2026-40384: Joomla! Core - [20260510] - Path traversal in com_media webservice endpointhttps://agentprime.io/advisories/CVE-2026-40384/https://agentprime.io/advisories/CVE-2026-40384/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:45:02 GMTCVECVE-2026-48897: Joomla! Core - [20260512] - MFA Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-48897/https://agentprime.io/advisories/CVE-2026-48897/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:44:53 GMTCVECVE-2026-25901: Joomla! Core - [20260502] - XSS in com_associationshttps://agentprime.io/advisories/CVE-2026-25901/https://agentprime.io/advisories/CVE-2026-25901/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:44:25 GMTCVECVE-2026-48899: Joomla! Core - [20260515] - Incorrect Access Control in sample data pluginshttps://agentprime.io/advisories/CVE-2026-48899/https://agentprime.io/advisories/CVE-2026-48899/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:44:06 GMTCVECVE-2026-48900: Joomla! Core - [20260516] - Incorrect Access Control in com_schedulerhttps://agentprime.io/advisories/CVE-2026-48900/https://agentprime.io/advisories/CVE-2026-48900/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:43:51 GMTCVECVE-2026-48902: Joomla! Core - [20260518] - Transport encryption downgrade for password and username reset linkshttps://agentprime.io/advisories/CVE-2026-48902/https://agentprime.io/advisories/CVE-2026-48902/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:43:32 GMTCVEcriticalCVE-2026-35223: Joomla! Core - [20260508] - Improper access check in com_config webservice endpointshttps://agentprime.io/advisories/CVE-2026-35223/https://agentprime.io/advisories/CVE-2026-35223/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:43:21 GMTCVEcritical