Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2024-21728
An Open Redirect vulnerability was found in osTicky2 below 2.2.8.
MEDIUM
CVSS 6.1
CVE-2024-21727
XSS vulnerability in DP Calendar component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-49708
SQLi vulnerability in Starshop component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-49707
SQLi vulnerability in S5 Register module for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-40659
A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40658
A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40657
A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40656
A reflected XSS vulnerability was discovered in the Quickform component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40655
A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40630
Unauthenticated LFI/SSRF in JCDashboards component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-40629
SQLi vulnerability in LMS Lite component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-40628
A reflected XSS vulnerability was discovered in the Extplorer component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40627
A reflected XSS vulnerability was discovered in the LivingWord component for Joomla.
MEDIUM
CVSS 6.1
CVE-2023-40626
Vulnérabilité dans Joomla!
UNKNOWN
CVE-2023-39974
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla.
MEDIUM
CVSS 5.3
CVE-2023-39973
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla.
MEDIUM
CVSS 4.3
CVE-2023-39972
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla.
MEDIUM
CVSS 4.3
CVE-2023-39971
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS.
MEDIUM
CVSS 6.1
CVE-2023-39970
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla.
CRITICAL
CVSS 9.8
CVE-2023-38045
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla.
MEDIUM
CVSS 6.1