Статус «активна» означает, что запись опубликована в 2026 году. Он не заменяет проверку версии и официального исправления.
An improper access check allows unauthorized users to access workflow stage and transition information.
An improper access check allows users to display a list of modules in the frontend.
An improper access check allows unauthorized users to access com_privacy datasets.
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
Improper validation leads to a generic XSS vector in the language override feature.
Lack of validation leads to an XSS vulnerability in the MFA management views.
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
An improper access check allows privileged users to overwrite media files without editing permissions.
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the category_id parameter. Attackers ca…
Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.
An improper access check allows privelege escalation through the com_users group editing webservice endpoint.
Lack of input filtering leads to an XSS vector in the HTML filter code.
An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.
An improper access check allows privilege escalation through the com_users batch task.