Joomla: >> Joomla! >> 4.1.2 Security Vulnerabilities
An improper access check allows unauthorized users to access com_privacy datasets.
CVSS Score
6.4
EPSS Score
0.004
Published
2026-07-07
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
CVSS Score
6.4
EPSS Score
0.005
Published
2026-07-07
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVSS Score
5.9
EPSS Score
0.002
Published
2026-07-07
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVSS Score
5.9
EPSS Score
0.002
Published
2026-07-07
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVSS Score
5.9
EPSS Score
0.002
Published
2026-07-07
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVSS Score
5.9
EPSS Score
0.002
Published
2026-07-07
An improper access check allows privileged users to overwrite media files without editing permissions.
CVSS Score
6.4
EPSS Score
0.003
Published
2026-07-07
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
CVSS Score
6.4
EPSS Score
0.004
Published
2026-07-07
Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-05-26
An improper access check allows privelege escalation through the com_users group editing webservice endpoint.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-05-26