Exposición de Joomla

CMS
1616
score de exposición
84.613
sitios usan
6
en explotación
108
críticos

CVEs

560 resultados
CVE-2023-23752MEDIUM[20230201] - Core - Improper access check in webservice endpointsEPSS 99.8%KEVCVE-2026-48908CRITICALJoomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2EPSS 88.5%KEVCVE-2026-48907CRITICALJoomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5EPSS 85.4%KEVCVE-2026-56290CRITICALJoomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0EPSS 30.9%KEVCVE-2026-48939CRITICALJoomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15EPSS 20.1%KEVCVE-2026-56291CRITICALJoomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1EPSS 14.9%KEVCVE-2021-26030—[20210401] - Core - Escape xss in logo parameter error pagesEPSS 82.8%CVE-2021-23124—[20210102] - Core - XSS in mod_breadcrumbs aria-label attributeEPSS 79.0%CVE-2024-21726MEDIUM[20240205] - Core - Inadequate content filtering within the filter codeEPSS 48.8%CVE-2020-35613—[20201104] - Core - SQL injection in com_users list viewEPSS 28.9%CVE-2024-21725MEDIUM[20240204] - Core - XSS in mail address outputsEPSS 26.8%CVE-2026-35223HIGHJoomla! Core - [20260508] - Improper access check in com_config webservice endpointsEPSS 12.8%CVE-2026-40383HIGHJoomla! Core - [20260509] - LFI in HTMLView layout parameterEPSS 12.5%CVE-2025-22206MEDIUMExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.2 for JoomlaEPSS 9.5%CVE-2012-1563—Joomla! before 2.5.3 allows Admin Account Creation.EPSS 8.9%CVE-2021-23132—[20210306] - Core - com_media allowed paths that are not intended for image uploadsEPSS 6.7%CVE-2020-35616—[20201107] - Core - Write ACL violation in multiple core viewsEPSS 6.3%CVE-2025-49484HIGHExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for JoomlaEPSS 4.9%CVE-2026-48909CRITICALJoomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4EPSS 4.9%CVE-2026-48904HIGHJoomla! Core - [20260514] - Privilege escalation through com_users webservice endpointsEPSS 4.6%