Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.0.0 – 3.9.25
Exploit type: LFI
Reported Date: 2021-01-03
Fixed Date: 2021-04-13
CVE Number: CVE-2021-26031
Description
Inadequate filters on module layout settings could lead to a…
[20210402] – Core – Inadequate filters on module layout settings Read More »
Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.0.0 – 3.9.25
Exploit type: XSS
Reported Date: 2021-03-09
Fixed Date: 2021-04-13
CVE Number: CVE-2021-26030
Description
Inadequate escaping allowed XSS attacks using the logo param…
[20210401] – Core – Escape xss in logo parameter error pages Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 1.6.0 – 3.9.24
Exploit type: ACL Violation
Reported Date: 2021-01-31
Fixed Date: 2021-03-02
CVE Number: CVE-2021-26029
Description
Inadequate filtering of form contents could a…
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 3.0.0 – 3.9.24
Exploit type: ACL violation
Reported Date: 2020-10-25
Fixed Date: 2021-03-02
CVE Number: CVE-2021-26027
Description
Incorrect ACL checks could allow unauthorized…
[20210307] – Core – ACL violation within com_content frontend editing Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 3.0.0 – 3.9.24
Exploit type: Improper Input Validation
Reported Date: 2020-02-17
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23132
Description
com_media allowed paths that are …
[20210306] – Core – com_media allowed paths that are not intended for image uploads Read More »
Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.2.0 – 3.9.24
Exploit type: Improper Input Validation
Reported Date: 2020-05-07
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23131
Description
Missing input validation within the te…
[20210305] – Core – Input validation within the template manager Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 2.5.0 – 3.9.24
Exploit type: XSS
Reported Date: 2020-05-05
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23130
Description
Missing filtering of feed fields could lead to xss issu…
[20210304] – Core – XSS within the feed parser library Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 3.0.0 – 3.9.24
Exploit type: Path Traversal
Reported Date: 2020-09-08
Fixed Date: 2021-03-02
CVE Number: CVE-2021-26028
Description
Extracting an specifilcy crafted zip package…
[20210308] – Core – Path Traversal within joomla/archive zip class Read More »
Project: Joomla!
SubProject: CMS
Impact: Moderate
Severity: Low
Versions: 2.5.0 – 3.9.24
Exploit type: XSS
Reported Date: 2020-05-07
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23129
Description
Missing filtering of messages showed to users that coul…
[20210303] – Core – XSS within alert messages showed to users Read More »
Project: Joomla!
SubProject: CMS
Impact: Low
Severity: Low
Versions: 3.2.0 – 3.9.24
Exploit type: Insecure Randomness
Reported Date: 2021-01-13
Fixed Date: 2021-03-02
CVE Number: CVE-2021-23128
Description
The core shipped but unused randval implemen…
[20210302] – Core – Potential Insecure FOFEncryptRandval Read More »
