Joomla ACL issue affects com_ajax access checks
Joomla! CMS installations running 3.0.0-5.4.3 or 6.0.0-6.0.3 are affected by an access-control issue in com_ajax. Administrators should upgrade to 5.4.4 or…
Security
Security releases, vulnerabilities and hardening for Joomla.
Joomla fixes SQL injection in com_content webservice endpoint
Joomla administrators running 4.0.0-5.4.3 or 6.0.0-6.0.3 should upgrade to 5.4.4 or 6.0.4 to fix a Moderate SQLi vulnerability in the articles webservice…
Joomla article title XSS fixed in 5.4.4 and 6.0.4
Administrators running Joomla! CMS 4.0.0-5.4.3 or 6.0.0-6.0.3 should upgrade to 5.4.4 or 6.0.4 to address a Moderate-severity XSS issue.
Joomla fixes high-severity file deletion flaw in com_joomlaupdate
Joomla administrators running versions 4.0.0-5.4.3 or 6.0.0-6.0.3 should upgrade to 5.4.4 or 6.0.4 to fix a high-severity vulnerability in com_joomlaupdate.
Joomla webservice access flaw fixed in 5.4.4 and 6.0.4
Joomla! CMS versions 4.0.0-5.4.3 and 6.0.0-6.0.3 are affected by an Incorrect Access Control flaw in webservice endpoints. The Joomla project rates its…
Critical Novarain Framework flaw puts Joomla sites at risk
A critical vulnerability in the Tassos/Novarain Framework for Joomla allows unauthenticated attackers to include, read and delete files and carry out SQL…
Critical Astroid Framework flaw is under active exploitation
JoomDev's Astroid Framework for Joomla is affected by a critical authentication bypass that attackers are actively using to upload backdoors and inject SEO…
Tassos Framework security patch fixes Joomla AJAX flaw
Tassos has released security updates for six Joomla extensions after a vulnerability in its Tassos Framework system plugin could, under certain conditions…
Joomla 3 security plugin reaches version 1.0.9
A security plugin for sites still running the unsupported Joomla 3 series has reached version 1.0.9, addressing five reported vulnerabilities including…
JL Content Fields Filter 4.0.0 adds Joomla 6 support
JL Content Fields Filter 4.0.0 is a major release of the free Joomla extension, adding full Joomla 6 compatibility while addressing five SQL injection issues…
Joomla passkey flaw enables user enumeration
Administrators running Joomla! CMS 4.0.0-4.4.13 or 5.0.0-5.3.3 should upgrade to 4.4.14 or 5.3.4 to address a User Enumeration issue in the passkey…