Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Joomla\!
(Joomla)| Repositories | https://github.com/joomla/joomla-cms |
| #Vulnerabilities | 259 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2017-04-25 | CVE-2017-7986 | In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various components. | Joomla\! | 6.1 | ||
| 2017-04-25 | CVE-2017-7985 | In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters leads to XSS vulnerabilities in various components. | Joomla\! | 6.1 | ||
| 2017-04-25 | CVE-2017-7984 | In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the template manager component. | Joomla\! | 6.1 | ||
| 2017-04-25 | CVE-2017-7983 | In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used PHPMailer version in the mail headers. | Joomla\! | 5.3 | ||
| 2017-11-10 | CVE-2017-16634 | In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method. | Joomla\! | 9.8 | ||
| 2017-11-10 | CVE-2017-16633 | In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users. | Joomla\! | 4.3 | ||
| 2017-09-20 | CVE-2017-14596 | In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password. | Joomla\! | 9.8 | ||
| 2017-07-26 | CVE-2017-11612 | In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various components. | Joomla\! | 6.1 | ||
| 2017-08-02 | CVE-2017-11364 | The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the target application by leveraging Certificate Transparency logs. | Joomla\! | 8.8 | ||
| 2016-12-16 | CVE-2016-9838 | An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the `registration.register` task. | Joomla\! | 7.5 |