Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2026-65891
Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2
MEDIUM
CVSS 6.5
CVE-2026-65882
Reflected XSS vulnerability in Joomdle < 3.1.1
MEDIUM
CVSS 6.1
CVE-2026-65765
Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1
MEDIUM
CVSS 6.9
CVE-2026-65764
Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1
MEDIUM
CVSS 5.1
CVE-2026-65763
Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4
MEDIUM
CVSS 5.1
CVE-2026-65762
Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0
MEDIUM
CVSS 5.1
CVE-2026-65756
XSS vector in Keyboard Shortcuts extension
MEDIUM
CVSS 6.1
CVE-2026-65713
Insecure path handling in Modals Pro extension
MEDIUM
CVSS 6.5
CVE-2026-65712
Insecure path handling in CDN for Joomla Pro extension
MEDIUM
CVSS 6.2
CVE-2026-64875
IP spoofing vulnerability in GeoIP extension
MEDIUM
CVSS 6.5
CVE-2026-64872
Path traversal in Cache Cleaner Pro extension
MEDIUM
CVSS 6.5
CVE-2026-64871
Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension
MEDIUM
CVSS 5.4
CVE-2026-64795
XSS vectors in tag-provided inputs in various Regular Labs extensions
MEDIUM
CVSS 5.4
CVE-2026-64794
restricted user-data exposure in Users Anywhere and Articles Anywhere extensions
MEDIUM
CVSS 6.5
CVE-2026-63281
XSS vulnerability in Regular Labs conditions manager
MEDIUM
CVSS 4.8
CVE-2026-63264
Reflective XSS in JoomShopping < 5.9.3
MEDIUM
CVSS 5.3
CVE-2026-61901
Open redirect in Hikashop < 6.5.2
MEDIUM
CVSS 6.1
CVE-2026-60033
SSRF via remote download in JMedia Extension < 1.6.0
MEDIUM
CVSS 5.1
CVE-2026-60031
Information disclosure in Quix Page Builder < 6.2.1
MEDIUM
CVSS 6.9
CVE-2026-60029
Authenticated stored XSS in Quix Page Builder < 6.2.1
MEDIUM
CVSS 5.1