Joomla ≫ Joomla!

Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.

An improper access check allows privileged users to overwrite media files without editing permissions.

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.

Lack of escaping leads to an XSS vulnerability in the generic image output layout.

Lack of validation leads to an XSS vulnerability in the MFA management views.

Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.

Lack of output escaping leads to a XSS vector in the multilingual associations component.

Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.

Lack of output escaping leads to a XSS vector in the pagebreak plugin.

Improper Access Controls allows backend users to overwrite their username when disallowed.