Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…EPSS 0.2%Oct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0EPSS 0.3%Oct 5, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0EPSS 0.1%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4EPSS 0.3%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0EPSS 0.1%Oct 5, 2026
- High8.7Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8EPSS 0.4%Oct 5, 2026
- Critical9.3Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16EPSS 0.3%Oct 5, 2026
- Critical9.3Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality a…EPSS 0.4%Sep 26, 2026
- Unknown[20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIsSep 25, 2026
- Unknown[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatchSep 25, 2026
- Unknown[20260914] - Core - MFA Authentication Bypass through rememberme cookiesSep 25, 2026
- Unknown[20260913] - Core - Improper ACL checks for varous webservice edit tasksSep 25, 2026
- Unknown[20260912] - Core - XSS in module listSep 25, 2026
- Unknown[20260910] - Core - Improper ACL checks for workflow stage changesSep 25, 2026
- Unknown[20260909] - Core - SSRF vectors in various core extensionsSep 25, 2026
- Unknown[20260911] - Core - XSS in link toolbar layoutSep 25, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesSep 25, 2026
- Unknown[20260907] - Core - Improper ACL checks in outputs for tagged itemsSep 25, 2026
- Unknown[20260906] - Core - Improper ACL checks in content history comparison viewSep 25, 2026
- Unknown[20260905] - Core - Arbitrary directory deletion via cache purge actionSep 25, 2026
- Unknown[20260904] - Core - XSS in the generic media output layoutsSep 25, 2026
- Unknown[20260903] - Core - Improper ACL checks for access level webservice endpointsSep 25, 2026
- Unknown[20260902] - Core - Unauthorized user account creation via profile.save controllerSep 25, 2026
- Unknown[20260901] - Core - XSS in HTMLHelper::link methodSep 25, 2026
- High8.6Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Si…EPSS 0.5%Aug 21, 2026
95 records · page 1 of 4
PreviousNext