CVE security advisories and vulnerability history for joomla-cms by joomla.
Last updated
joomla joomla-cms has 168 published CVE records since 2016, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting joomla joomla-cms, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of joomla joomla-cms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
141 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of joomla joomla-cms's CVEs is confirmed exploited in the wild.
Public exploits
10
10 of joomla joomla-cms's CVEs have a known public exploit available.
Browse every joomla joomla-cms version named in a CVE, then pick one to see only the CVEs that affect it.
168 CVEs
Added to CISA KEV 2024-01-08
Showing 30 of 168
The CWE weakness categories most often found in joomla joomla-cms CVEs. Follow any weakness for its full explanation.
How many joomla joomla-cms CVEs were published each year.
Browse vulnerabilities for other products by joomla.
Common questions about joomla joomla-cms vulnerabilities.
joomla joomla-cms has 168 published CVE records since 2016.
Yes — 1 of joomla joomla-cms's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 10 of joomla joomla-cms's CVEs have a known public exploit.
513 distinct joomla joomla-cms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
joomla joomla-cms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-284 (Improper Access Control), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).
joomla joomla-cms has 2 critical and 5 high-severity CVEs.
The average CVSS base score across joomla joomla-cms's scored CVEs is 6.4.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new joomla joomla-cms vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
