(BPT) – Feel like your paycheck is gone before your next payday? You’re not alone. A 2020 survey, ‘Getting Paid in America,’ revealed that 2 out of 3 Americans are living paycheck to paycheck.Not only is this stressful and frustrating, it can cause you…
Top 5 paycheck-stretching hacks for 2021 Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 1.6.0 – 3.9.24
Exploit type: ACL Violation
Reported Date: 2021-01-31
Fixed Date: 2021-03-02
CVE Number: CVE-2021-26029
Description
Inadequate filtering of form contents could a…
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 3.0.0 – 3.9.24
Exploit type: ACL violation
Reported Date: 2020-10-25
Fixed Date: 2021-03-02
CVE Number: CVE-2021-26027
Description
Incorrect ACL checks could allow unauthorized…
[20210307] – Core – ACL violation within com_content frontend editing Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 3.0.0 – 3.9.24
Exploit type: Improper Input Validation
Reported Date: 2020-02-17
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23132
Description
com_media allowed paths that are …
[20210306] – Core – com_media allowed paths that are not intended for image uploads Read More »
Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.2.0 – 3.9.24
Exploit type: Improper Input Validation
Reported Date: 2020-05-07
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23131
Description
Missing input validation within the te…
[20210305] – Core – Input validation within the template manager Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 2.5.0 – 3.9.24
Exploit type: XSS
Reported Date: 2020-05-05
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23130
Description
Missing filtering of feed fields could lead to xss issu…
[20210304] – Core – XSS within the feed parser library Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 2.5.0 – 3.9.24
Exploit type: XSS
Reported Date: 2020-05-07
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23129
Description
Missing filtering of messages showed to users that coul…
[20210303] – Core – XSS within alert messages showed to users Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 3.0.0 – 3.9.24
Exploit type: Path Traversal
Reported Date: 2020-09-08
Fixed Date: 2021-03-02
CVE Number: CVE-2021-26028
Description
Extracting an specifilcy crafted zip package…
[20210308] – Core – Path Traversal within joomla/archive zip class Read More »
Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.2.0 – 3.9.24
Exploit type: Insecure Randomness
Reported Date: 2021-01-13
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23128
Description
The core shipped but unused randval implemen…
[20210302] – Core – Potential Insecure FOFEncryptRandval Read More »
Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.2.0 – 3.9.24
Exploit type: Insecure Randomness
Reported Date: 2021-01-12
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23126, CVE-2021-23127
Description
Usage of the insecure rand()…
[20210301] – Core – Insecure randomness within 2FA secret generation Read More »
