Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:joomla\!:*:*:*:*:elts:*:*:*

part: a version: * update: *

VendorJoomla (6fa59c4b-5b62-59b9-bce0-735b9b6b6c51)
ProductJoomla! (10fae64e-55af-54aa-88fc-fe7759e94ebb)
Edition*
Language*
Software editionelts
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-40749 vulnerable 2026-06-08 06:43:53.128345 [20250103] - Core - Read ACL violation in multiple core views
Improper Access Controls allows access to protected views.
Published: 2025-01-07T16:22:12.593Z
Updated: 2025-01-08T14:46:53.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40748 vulnerable 2026-06-08 06:43:53.127732 [20250102] - Core - XSS vector in the id attribute of menu lists
Lack of output escaping in the id attribute of menu lists.
Published: 2025-01-07T16:22:00.896Z
Updated: 2025-01-08T14:51:06.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40743 vulnerable 2026-06-08 06:43:53.111809 [20240805] - Core - XSS vectors in Outputfilter::strip* methods
The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors.
Published: 2024-08-20T16:03:45.461Z
Updated: 2024-11-03T04:33:21.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27185 vulnerable 2026-06-08 06:31:28.125488 [20240802] - Core - Cache Poisoning in Pagination
The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.
Published: 2024-08-20T16:03:58.015Z
Updated: 2025-03-29T04:35:10.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27184 vulnerable 2026-06-08 06:31:28.123691 [20240801] - Core - Inadequate validation of internal URLs
Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not..
Published: 2024-08-20T16:03:51.605Z
Updated: 2024-11-26T04:34:52.366Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.