How many Joomla joomla/joomla-cms CVEs are in CISA KEV?

None of Joomla joomla/joomla-cms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Joomla joomla/joomla-cms are affected?

16 distinct Joomla joomla/joomla-cms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Joomla joomla/joomla-cms CVEs?

Joomla joomla/joomla-cms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-287 (Improper Authentication), CWE-502 (Deserialization of Untrusted Data).

How many critical Joomla joomla/joomla-cms vulnerabilities are there?

Joomla joomla/joomla-cms has 1 critical and 1 high-severity CVEs.

What is the average severity of Joomla joomla/joomla-cms CVEs?

The average CVSS base score across Joomla joomla/joomla-cms's scored CVEs is 5.0.

Joomla joomla/joomla-cms Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Joomla joomla/joomla-cms vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Joomla joomla/joomla-cms Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Joomla joomla/joomla-cms has 8 published CVE records since 2010, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 5.0.

Severity and exploitation

How the CVSS severity of Joomla joomla/joomla-cms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium4

Low2

In CISA’s Known Exploited Vulnerabilities catalog

None of Joomla joomla/joomla-cms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of Joomla joomla/joomla-cms's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Joomla joomla/joomla-cms version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.6.42 CVEs
< 3.1.61 CVE
1.5 <= v < 1.5.181 CVE
2.5.0 <= v < 3.9.31 CVE
3.0.0 <= v < 3.8.81 CVE
3.0.0 <= v < 3.9.121 CVE
4.0.0 <= v < 4.4.131 CVE
5.0.0 <= v < 5.2.61 CVE

Fixed in

1.6.42 CVEs
1.5.181 CVE
3.1.61 CVE

Common weakness types

The CWE weakness categories most often found in Joomla joomla/joomla-cms CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Joomla joomla/joomla-cms CVEs were published each year.

2010

2011

2013

2018

2019

2025

Other Joomla products

Browse vulnerabilities for other products by Joomla.

joomla!669 CVEs joomla-cms241 CVEs joomla215 CVEs Joomla! CMS137 CVEs bsq sitestats6 CVEs Joomla! Framework Filter package4 CVEs rs gallery24 CVEs com beamospetition3 CVEs

Frequently asked questions

Common questions about Joomla joomla/joomla-cms vulnerabilities.

How many CVEs does Joomla joomla/joomla-cms have?: Joomla joomla/joomla-cms has 8 published CVE records since 2010.
How many Joomla joomla/joomla-cms CVEs are in CISA KEV?: None of Joomla joomla/joomla-cms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Joomla joomla/joomla-cms vulnerabilities?: Yes — 2 of Joomla joomla/joomla-cms's CVEs have a known public exploit.
Which versions of Joomla joomla/joomla-cms are affected?: 16 distinct Joomla joomla/joomla-cms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Joomla joomla/joomla-cms CVEs?: Joomla joomla/joomla-cms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-287 (Improper Authentication), CWE-502 (Deserialization of Untrusted Data).
How many critical Joomla joomla/joomla-cms vulnerabilities are there?: Joomla joomla/joomla-cms has 1 critical and 1 high-severity CVEs.
What is the average severity of Joomla joomla/joomla-cms CVEs?: The average CVSS base score across Joomla joomla/joomla-cms's scored CVEs is 5.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Joomla joomla/joomla-cms vulnerabilities

Get an alert for each new Joomla joomla/joomla-cms CVE, with AI-written analysis and remediation steps.

Create an account See pricing