18 results (0.038 seconds)

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

The wrapper extensions do not correctly validate inputs, leading to XSS vectors. El filtrado de contenido inadecuado genera vulnerabilidades XSS en varios componentes. • https://developer.joomla.org/security-centre/938-20240704-core-xss-in-wrapper-extensions.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0

The Custom Fields component not correctly filter inputs, leading to a XSS vector. El componente Custom Fields no filtra correctamente las entradas, lo que genera un vector XSS. • https://developer.joomla.org/security-centre/939-20240705-core-xss-in-com-fields-default-field-value.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0

The language file parsing process could be manipulated to expose environment variables. Environment variables might contain sensible information. El proceso de análisis de archivos de idioma podría manipularse para exponer variables de entorno. Las variables de entorno pueden contener información sensible. • https://developer.joomla.org/security-centre/919-20231101-core-exposure-of-environment-variables.html •

CVSS: 5.3EPSS: 94%CPEs: 1EXPL: 45

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. Joomla! versions prior to 4.2.8 suffer from an unauthenticated information disclosure vulnerability. • https://www.exploit-db.com/exploits/51334 https://github.com/Acceis/exploit-CVE-2023-23752 https://github.com/ThatNotEasy/CVE-2023-23752 https://github.com/gibran-abdillah/CVE-2023-23752 https://github.com/K3ysTr0K3R/CVE-2023-23752-EXPLOIT https://github.com/Fernando-olv/Joomla-CVE-2023-23752 https://github.com/Ly0kha/Joomla-CVE-2023-23752-Exploit-Script https://github.com/Rival420/CVE-2023-23752 https://github.com/shellvik/CVE-2023-23752 https://github.com/AlissonFaoli/CVE&# • CWE-284: Improper Access Control •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access com_actionlogs. • https://developer.joomla.org/security-centre/891-20230102-core-missing-acl-checks-for-com-actionlogs.html • CWE-863: Incorrect Authorization •