Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2026-67283
Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2
MEDIUM
CVSS 6.9
CVE-2026-66493
Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
MEDIUM
CVSS 6.4
CVE-2026-66492
Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
MEDIUM
CVSS 6.1
CVE-2026-66490
Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
MEDIUM
CVSS 6.1
CVE-2026-66489
Various unauthenticated file system disclosure in Gridbox < 2.20.2
MEDIUM
CVSS 5.3
CVE-2026-66488
Payment bypass in Gridbox < 2.20.2
MEDIUM
CVSS 5.3
CVE-2026-65946
XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0
MEDIUM
CVSS 6.1
CVE-2026-65891
Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2
MEDIUM
CVSS 6.5
CVE-2026-65882
Reflected XSS vulnerability in Joomdle < 3.1.1
MEDIUM
CVSS 6.1
CVE-2026-65765
Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1
MEDIUM
CVSS 6.9
CVE-2026-65764
Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1
MEDIUM
CVSS 5.1
CVE-2026-65763
Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4
MEDIUM
CVSS 5.1
CVE-2026-65762
Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0
MEDIUM
CVSS 5.1
CVE-2026-65756
XSS vector in Keyboard Shortcuts extension
MEDIUM
CVSS 6.1
CVE-2026-65713
Insecure path handling in Modals Pro extension
MEDIUM
CVSS 6.5
CVE-2026-65712
Insecure path handling in CDN for Joomla Pro extension
MEDIUM
CVSS 6.2
CVE-2026-64875
IP spoofing vulnerability in GeoIP extension
MEDIUM
CVSS 6.5
CVE-2026-64872
Path traversal in Cache Cleaner Pro extension
MEDIUM
CVSS 6.5
CVE-2026-64871
Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension
MEDIUM
CVSS 5.4
CVE-2026-64795
XSS vectors in tag-provided inputs in various Regular Labs extensions
MEDIUM
CVSS 5.4