Joomla ≫ Joomla!

Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.

An improper access check allows privileged users to overwrite media files without editing permissions.

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.

Lack of escaping leads to an XSS vulnerability in the generic image output layout.

Lack of validation leads to an XSS vulnerability in the MFA management views.

Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.

Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.

An improper validation of user-supplied input leads to a local file inclusion vulnerability.

Lack of input filtering leads to an XSS vector in the HTML filter code.

An improper access check allows privilege escalation through the com_users batch task.