Vulnerabilities in Joomla! Project
140 resultsCVE-2026-21631MEDIUMJoomla! Core - [20260303] - XSS vector in com_associations comparison viewEPSS 0.2%CVE-2026-90914MEDIUMJoomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-90906MEDIUMJoomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-90913HIGHJoomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2025-63082MEDIUMJoomla! Core - [20260101] - Inadequate content filtering for data URLsEPSS 0.2%CVE-2025-63083MEDIUMJoomla! Core - [20260102] - XSS vector in the pagebreak pluginEPSS 0.2%CVE-2026-48897HIGHJoomla! Core - [20260512] - MFA Authentication BypassEPSS 0.2%CVE-2026-90918MEDIUMJoomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-90917MEDIUMJoomla! Core - [20260907] - Core - Improper ACL checks in outputs for tagged items in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-21632MEDIUMJoomla! Core - [20260304] - XSS vectors in various article title outputsEPSS 0.2%CVE-2026-90916MEDIUMJoomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-25900MEDIUMJoomla! Core - [20260501] - XSS in feed modulesEPSS 0.2%CVE-2026-30894MEDIUMJoomla! Core - [20260503] - XSS in com_contenthistoryEPSS 0.2%CVE-2026-25901MEDIUMJoomla! Core - [20260502] - XSS in com_associationsEPSS 0.2%CVE-2026-30895MEDIUMJoomla! Core - [20260504] - XSS in readmore linksEPSS 0.2%CVE-2026-92223MEDIUMJoomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3EPSS 0.2%CVE-2026-48900MEDIUMJoomla! Core - [20260516] - Incorrect Access Control in com_schedulerEPSS 0.2%CVE-2026-48903MEDIUMJoomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.EPSS 0.1%CVE-2026-48905MEDIUMJoomla! Framework - [20260520] - Inadequate content filtering within the cleanAttributes filter code.EPSS 0.1%CVE-2026-35220MEDIUMJoomla! Core - [20260505] - CSRF in user activation endpointEPSS 0.1%