joomla-project

Top products

The 15 most recently published vulnerabilities affecting joomla-project.

• CVE-2026-48952Joomla! Core - [20260706] - XSS in com_installer6.1Jul 7, 2026
• CVE-2026-48947Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints4.9Jul 7, 2026
• CVE-2026-48958Joomla! Core - [20260712] - Incorrect Access Control in com_fields webservice endpoints8.8Jul 7, 2026
• CVE-2026-48950Joomla! Core - [20260704] - XSS in com_templates6.1Jul 7, 2026
• CVE-2026-48955Joomla! Core - [20260709] - Incorrect Access Control in com_workflow6.5Jul 7, 2026
• CVE-2026-48956Joomla! Core - [20260710] - Incorrect Access Control in com_modules5.0Jul 7, 2026
• CVE-2026-48957Joomla! Core - [20260711] - Incorrect Access Control in com_privacy webservice endpoints8.8Jul 7, 2026
• CVE-2026-48951Joomla! Core - [20260705] - XSS in various modalreturn layouts6.1Jul 7, 2026
• CVE-2026-48953Joomla! Core - [20260707] - XSS in the generic image output layout6.1Jul 7, 2026
• CVE-2026-48948Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download8.8Jul 7, 2026
• CVE-2026-48949Joomla! Core - [20260703] - XSS in MFA method management6.1Jul 7, 2026
• CVE-2026-48954Joomla! Core - [20260708] - XSS through language overrides6.1Jul 7, 2026
• CVE-2026-35221Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder9.8May 26, 2026
• CVE-2026-48903Joomla! Framework - [20260519] - Inadequate content filtering within the checkAttribute filter code.6.1May 26, 2026
• CVE-2026-48896Joomla! Core - [20260511] - MFA Authentication Bypass7.5May 26, 2026