Show filters
389 Total Results
Displaying 41-50 of 389
Sort by:
Attacker Value
Unknown
CVE-2022-27913
Disclosure Date: October 25, 2022 (last updated December 02, 2023)
An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.
0
Attacker Value
Unknown
CVE-2022-27912
Disclosure Date: October 25, 2022 (last updated December 02, 2023)
An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.
0
Attacker Value
Unknown
CVE-2022-27911
Disclosure Date: August 30, 2022 (last updated October 08, 2023)
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing '_JEXEC or die check' caused by the PSR12 changes.
0
Attacker Value
Unknown
CVE-2022-23800
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.
0
Attacker Value
Unknown
CVE-2022-23801
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.
0
Attacker Value
Unknown
CVE-2022-23798
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.
0
Attacker Value
Unknown
CVE-2022-23796
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.
0
Attacker Value
Unknown
CVE-2022-23797
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection.
0
Attacker Value
Unknown
CVE-2022-23793
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
0
Attacker Value
Unknown
CVE-2022-23799
Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.
0
