Exposure of Joomla

CMS
1,616
exposure score
84,613
sites use
6
exploited
108
critical

CVEs

560 results
CVE-2026-85189HIGHJoomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0EPSS 0.4%CVE-2026-77996HIGHJoomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41EPSS 0.4%CVE-2026-78071HIGHJoomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0EPSS 0.4%CVE-2026-88853HIGHJoomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0EPSS 0.4%CVE-2026-88852HIGHJoomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0EPSS 0.4%CVE-2026-85195HIGHJoomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0EPSS 0.4%CVE-2026-85190HIGHJoomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5EPSS 0.4%CVE-2026-85191HIGHJoomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0EPSS 0.4%CVE-2026-60029MEDIUMJoomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1EPSS 0.4%CVE-2026-65881HIGHJoomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1EPSS 0.4%CVE-2026-65430HIGHJoomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extensionEPSS 0.4%CVE-2026-75953HIGHJoomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3EPSS 0.4%CVE-2026-65755HIGHJoomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensionEPSS 0.4%CVE-2026-77028MEDIUMJoomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66EPSS 0.4%CVE-2026-90904HIGHJoomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0EPSS 0.4%CVE-2026-71570MEDIUMJoomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11EPSS 0.4%CVE-2025-25227HIGH[20250402] - Joomla Core - MFA Authentication BypassEPSS 0.4%CVE-2026-60032CRITICALJoomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0EPSS 0.4%CVE-2026-21626CRITICALExtension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for JoomlaEPSS 0.4%CVE-2026-23899HIGHJoomla! Core - [20260306] - Improper access check in webservice endpointsEPSS 0.4%