This vulnerability in Joomla! CMS arises from improper access control checks on workflow stage changes. Specifically, in affected versions 5.0.0-5.4.8 and 6.0.0-6.1.3, users with high privileges but without proper authorization can update the workflow stage of content that is otherwise inaccessible to them. The issue is categorized under CWE-284 (Improper Access Control). The CVSS 4.0 base score is 5.1, indicating a medium severity level. No known exploits in the wild have been reported, and no official patch or vendor advisory link is provided in the data.

The vulnerability allows unauthorized modification of content workflow stages, potentially leading to unauthorized content state changes. This could affect content publishing processes or content visibility controls within Joomla! CMS. The impact is limited to users who already have high privileges but lack proper authorization for specific content workflow changes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor Joomla! Project advisories for updates. Until a fix is available, restrict high privilege user access to trusted personnel only and review workflow permissions carefully.