pkg:Packagist/joomla/joomla-cms

All known vulnerabilities

• CRITICAL9.8CVE-2019-7743Joomla! Object Injection Vulnerability
  >= 2.5.0, < 3.9.3
• HIGH7.5CVE-2025-25227[20250402] - Joomla Core - MFA Authentication Bypass
  >= 5.0.0, < 5.2.6
• MEDIUM6.1CVE-2019-16725Joomla! XSS in Default Templates
  >= 3.0.0, < 3.9.12
• MEDIUM4.8CVE-2018-11326Joomla! XSS Vulnerability
  >= 3.0.0, < 3.8.8
• —CVE-2011-4332Joomla! vulnerable to Cross-site Scripting
  from 0, < 1.6.4
• —CVE-2013-5583Joomla! Cross-site Scripting vulnerability
  from 0, < 3.1.6
• —CVE-2010-1649Joomla! vulnerable to Cross-site Scripting
  >= 1.5, < 1.5.18
• —CVE-2011-2509Joomla! vulnerable to Cross-site Scripting
  from 0, < 1.6.4