Threat database

CVE-2026-92231 is a high-severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting multiple version ranges. The flaw arises from improper neutralization of input during web page generation due to an XSS filter bypass caused by HTML5 entity decode mismatch. Specifically, the checkAttribute method normalizes attribute values without decoding HTML5 entities before testing for the "javascript:" scheme, enabling an XSS vector.

CVE-2026-92232 is a high-severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting multiple version ranges. The issue arises from the cleanAttribute method failing to properly sanitize HTML data URIs when injected with whitespace characters, allowing an attacker to bypass the XSS filter. This vulnerability affects Joomla! versions 1.5.0 through 5.4.8, 6.0.0 through 6.1.3, 1.0.0 through 3.0.6, and 4.0.0 through 4.1.0. The vulnerability has a CVSS 4.0 base score of 7.1, indicating high severity. No patch or remediation information is provided in the source data.

CVE-2026-92227 is a high-severity improper authentication vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The flaw involves premature issuance of a rememberme cookie that allows bypassing multi-factor authentication (MFA). This vulnerability enables attackers to circumvent MFA protections without user interaction or privileges.

CVE-2026-92226 is a high-severity vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It involves improper access control checks in various webservice edit tasks, allowing unauthorized users with certain privileges to perform edit actions on items that should not be editable.

A cross-site scripting (XSS) vulnerability exists in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3 in the link toolbar layout. This vulnerability arises from improper escaping of inputs, allowing an attacker to inject malicious scripts during web page generation. The issue has a medium severity rating with a CVSS score of 5.9.

CVE-2026-92225 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises because the module list layout does not properly escape user-supplied input, allowing an attacker to inject malicious scripts. This vulnerability has a medium severity rating with a CVSS score of 5.9. No known exploits are reported in the wild, and no official patch information is provided in the input data.

CVE-2026-92223 is a medium severity vulnerability in Joomla! CMS versions 5.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It involves improper access control that allows unauthorized users with certain privileges to update the workflow stage of content they should not have access to.

CVE-2026-92222 is a Server-Side Request Forgery (SSRF) vulnerability affecting Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from improper validation of URLs used in server-side requests within various core extensions. This flaw could allow an attacker with high privileges to induce the server to make unauthorized requests. The vulnerability has a high severity rating with a CVSS 4.0 score of 8.9.

CVE-2026-90918 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from the mail template feature lacking proper escaping mechanisms, allowing injection of malicious scripts in HTML mail templates. This vulnerability has a medium severity rating with a CVSS score of 6.9.

CVE-2026-90917 is an improper access control vulnerability in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It allows unauthorized users to view content items from categories they should not have access to due to improper ACL checks in outputs for tagged items.

CVE-2026-90915 is a path traversal vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It allows improper validation of cache group names during cache purge actions, enabling arbitrary directory deletions. The vulnerability has a high severity rating with a CVSS 4.0 score of 7. No known exploits are reported in the wild. Joomla! CMS is not a cloud service, and no patch information is provided in the source data.

A cross-site scripting (XSS) vulnerability exists in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from improper escaping in the generic audio and video output layouts, allowing injection of malicious scripts during web page generation.

A vulnerability in Joomla! CMS versions 1.5.0 through 5.4.8 and 6.0.0 through 6.1.3 allows unauthorized creation of guest-level user accounts via the profile.save controller. This occurs because the controller does not verify the login state of the user, enabling account creation on sites without active user registration.

CVE-2026-90913 is a high severity vulnerability in Joomla! CMS versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It involves improper access control checks on webservice endpoints related to access levels, allowing unauthorized users with certain privileges to perform mutation actions. This flaw affects the core Joomla! CMS and could lead to unauthorized modifications via these endpoints.

A cross-site scripting (XSS) vulnerability exists in Joomla! CMS versions 1.5.0 through 5.4.8 and 6.0.0 through 6.1.3. The issue arises from improper escaping in the HTMLHelper::link method, which can lead to injection of malicious scripts during web page generation.

CVE-2026-90916 is an improper access control vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It allows unauthorized users with high privileges to view content that should be inaccessible via the content history comparison view. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.1.

CVE-2026-73372 is an improper access control vulnerability in Joomla! CMS affecting versions 5.1.0 through 5.4.6 and 6.0.0 through 6.1.2. The flaw allows injection of contact information for inaccessible contact items into schema.org snippets due to improper ACL checks. The vulnerability has a medium severity with a CVSS 4.0 score of 5.1.

CVE-2026-72531 is an improper access control vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.7 and 6.0.0 through 6.1.2. It allows unauthorized users with high privileges to create custom fields for components they should not access via webservice endpoints. The vulnerability has a medium severity with a CVSS score of 5.1.

CVE-2026-71573 is a vulnerability in Joomla! CMS involving improper CORS origin validation in versions 4.0.0 through 5.4.7 and 6.0.0 through 6.1.2. This flaw allows certain CORS requests to bypass origin checks due to improper implementation. The issue is classified as CWE-93, related to improper neutralization of CRLF sequences. The vulnerability has a CVSS 4.0 base score of 6.9, indicating high severity.

CVE-2026-71572 is a medium severity vulnerability in Joomla! CMS affecting versions 3.0.0 through 5.4.6 and 6.0.0 through 6.1.2. It involves improper neutralization of CRLF sequences leading to response header injection in download views. This flaw allows reflected file download or content-type confusion due to lack of output processing in multiple download views.