Exposición de Joomla

CMS
1616
score de exposición
84.613
sitios usan
6
en explotación
108
críticos

CVEs

560 resultados
CVE-2021-23125—[20210103] - Core - XSS in com_tags image parametersEPSS 0.8%CVE-2021-26039—[20210705] - Core - XSS in com_media imagelistEPSS 0.7%CVE-2021-26035—[20210701] - Core - XSS in JForm Rules fieldEPSS 0.7%CVE-2023-40630CRITICALExtension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30EPSS 0.7%CVE-2026-76604CRITICALJoomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2EPSS 0.7%CVE-2026-76605CRITICALJoomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2EPSS 0.7%CVE-2016-15016MEDIUMmrtnmtth joomla_mod_einsatz_stats helper.php getStatsByType sql injectionEPSS 0.7%CVE-2022-23800—[20220308] - Core - Inadequate content filtering within the filter codeEPSS 0.7%CVE-2026-85192CRITICALJoomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0EPSS 0.7%CVE-2026-88856CRITICALJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7EPSS 0.7%CVE-2023-54357HIGHJoomla com_booking 2.4.9 Information Disclosure via Account EnumerationEPSS 0.7%CVE-2025-22208MEDIUMExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.3 for JoomlaEPSS 0.7%CVE-2026-73373HIGHJoomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2EPSS 0.6%CVE-2023-38044—Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2EPSS 0.6%CVE-2026-77991CRITICALJoomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1EPSS 0.6%CVE-2026-88857CRITICALJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7EPSS 0.6%CVE-2023-28732MEDIUMMissing access control affecting the AcyMailing plugin for JoomlaEPSS 0.6%CVE-2022-27912—[20221001] - Core - Debug Mode leaks full request payloads including passwordsEPSS 0.6%CVE-2026-65431CRITICALJoomla Extension - regularlabs.com - Zipslip in GeoIP extensionEPSS 0.6%CVE-2023-34477—Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0EPSS 0.6%