Exposure of Joomla

CMS
1,616
exposure score
84,613
sites use
6
exploited
108
critical

CVEs

560 results
CVE-2026-75114MEDIUMJoomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64EPSS 0.4%CVE-2023-40658—Extension - deconf.net - Reflected XSS in Clicky Analytics Dashboard module for Joomla 1.0.0-1.3.1EPSS 0.4%CVE-2023-40657—Extension - artio.net - Reflected XSS in Joomdoc component for Joomla 1.0.0-4.0.5EPSS 0.4%CVE-2023-40655—Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0EPSS 0.4%CVE-2023-40656—Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01EPSS 0.4%CVE-2023-40627—Extension - MLWebTechnologies - Reflected XSS in LivingWord component for Joomla 1.0.0-3.0.0EPSS 0.4%CVE-2023-40628—Extension - Extplorer.net - Reflected XSS in Extplorer component for Joomla 1.0.0-2.1.15EPSS 0.4%CVE-2023-40659—Extension - joomboost.com - Reflected XSS in Easy Quick Contact module for Joomla 1.0.0-1.3.0EPSS 0.4%CVE-2026-62414CRITICALJoomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2EPSS 0.4%CVE-2025-50126MEDIUMExtension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for JoomlaEPSS 0.4%CVE-2026-105601MEDIUMJoomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5EPSS 0.4%CVE-2026-107129HIGHJoomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0EPSS 0.4%CVE-2026-65766CRITICALJoomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1EPSS 0.4%CVE-2026-57831HIGHJoomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2EPSS 0.4%CVE-2026-58078HIGHJoomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1EPSS 0.4%CVE-2026-57832HIGHJoomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9EPSS 0.4%CVE-2023-39971—Extension - acymailing.com - XSS in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3EPSS 0.4%CVE-2023-39972—Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3EPSS 0.4%CVE-2023-39973—Extension - acymailing.com - Improper Access Control in AcyMailing Enterprise component for Joomla 6.7.0-8.6.3EPSS 0.4%CVE-2020-35615—[20201106] - Core - CSRF in com_privacy emailexport featureEPSS 0.4%