Threat database

69 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.6	EPSS 0.5%	CVE-2026-23898Joomla! CMS · Destructive File Deletion and Potential System Compromise High8.6EPSS 0.5%2026-04-01CVE Database V5CVE-2026-23898 Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism. EPSS 0.5%Vulnerability Joomla! Project #cwe-73	CVE Database V5	2026-04-01
High	8.6	EPSS 0.4%	CVE-2026-23899Joomla! CMS · Improper Access Control High8.6EPSS 0.4%2026-04-01CVE Database V5CVE-2026-23899 CVE-2026-23899 is a high-severity vulnerability in Joomla! CMS versions 4.0.0 through 5.4.3 and 6.0.0 through 6.0.3. EPSS 0.4%Vulnerability Joomla! Project #cwe-284	CVE Database V5	2026-04-01
Medium	5.9	EPSS 0.2%	CVE-2026-21631Joomla! CMS · Cross-site Scripting Medium5.9EPSS 0.2%2026-04-01CVE Database V5CVE-2026-21631 CVE-2026-21631 is a medium severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.3 and 6.0.0 through 6.0.3. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-04-01
Medium	5.9	EPSS 0.2%	CVE-2026-21632Joomla! CMS · Cross-site Scripting Medium5.9EPSS 0.2%2026-04-01CVE Database V5CVE-2026-21632 CVE-2026-21632 is a medium severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.3 and 6.0.0 through 6.0.3. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-04-01
Medium	5.9	EPSS 0.2%	CVE-2025-63082Joomla! CMS · Cross-site Scripting Medium5.9EPSS 0.2%2026-01-06CVE Database V5CVE-2025-63082 Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-01-06
Medium	5.9	EPSS 0.2%	CVE-2025-63083Joomla! CMS · Cross-site Scripting Medium5.9EPSS 0.2%2026-01-06CVE Database V5CVE-2025-63083 Lack of output escaping leads to a XSS vector in the pagebreak plugin. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-01-06
Medium	5.3	EPSS 0.3%	CVE-2025-54477Joomla! CMS · Observable Discrepancy Medium5.3EPSS 0.3%2025-09-30CVE Database V5CVE-2025-54477 Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method. EPSS 0.3%Vulnerability Joomla! Project #cwe-203	CVE Database V5	2025-09-30
Medium	4.8	EPSS 0.3%	CVE-2025-54476Joomla! CMS · Cross-site Scripting Medium4.8EPSS 0.3%2025-09-30CVE Database V5CVE-2025-54476 Improper handling of input could lead to an XSS vector in the checkAttribute method of the input filter framework class. EPSS 0.3%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2025-09-30
Medium	5.3	KEVEPSS 99%	CVE-2023-23752Joomla! CMS · ACL Medium5.3KEVEPSS 99%2023-02-16CVE Database V5CVE-2023-23752 An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. KEVEPSS 99%Vulnerability Joomla! Project	CVE Database V5	2023-02-16

Showing 61–69 of 69 results