Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2023-40657
A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40656
A reflected XSS vulnerability was discovered in the Quickform component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40655
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40630
Unauthenticated LFI/SSRF in JCDashboards component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-40629
SQLi vulnerability in LMS Lite component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-40628
A reflected XSS vulnerability was discovered in the Extplorer component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40627
A reflected XSS vulnerability was discovered in the LivingWord component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-39974
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla.
MEDIUM
CVSS 5.3
CVE-2023-39973
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla.
MEDIUM
CVSS 4.3
CVE-2023-39972
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla.
MEDIUM
CVSS 4.3
CVE-2023-39971
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS.
MEDIUM
CVSS 6.1
CVE-2023-39970
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-38045
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-23756
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-23753
The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query.
CRITICAL
CVSS 9.8
CVE-2023-28733
AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when acce…
MEDIUM
CVSS 6.1
CVE-2023-28732
Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system…
HIGH
CVSS 7.5
CVE-2023-28731
AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to un…
CRITICAL
CVSS 9.8
CVE-2016-15016
A vulnerability was found in mrtnmtth joomla_mod_einsatz_stats up to 0.2.
CRITICAL
CVSS 9.8
CVE-2010-10003
A vulnerability classified as critical was found in gesellix titlelink on Joomla.
CRITICAL
CVSS 9.8