Read the docs

Joomla!

Records579All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical42CVSS 9.0–10.0
CVSS high245CVSS 7.0–8.9

Exploited now

Joomla! records in CISA KEV
TI-2016-08118 PHPMailer Command Injection Vulnerability Priority CRITICAL 100KEV 2025-07-07TI-2023-09555 Joomla! Improper Access Control Vulnerability Priority HIGH 81KEV 2024-01-08

Components

Products in the NVD configurations · select one to filter the records
Joomla! 340 records CRITICAL Joomla 81 records MEDIUM Bsq Sitestats 6 records LOW Rs Gallery2 4 records LOW Com Beamospetition 3 records LOW Com Weblinks 3 records LOW Com Astatspro 2 records LOW Com Downloads 2 records LOW

Records

3 records in Com Beamospetition · all components

TI-2009-00358 CVE-2009-0378 · GHSA-3h66-68qg-wvwr

Cross-site scripting (XSS) vulnerability in index.php in the beamospetition…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in index.php in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the pet parameter in a sign…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01475 Published 2009-02-02 No fix listed CWE-79
Open these records in search →