Joomla! - SITE - Advanced Web Factories

/*====== google reCaptcha ======*/

Bewertung: 0 / 5

[20210401] - Core - Escape xss in logo parameter error pages
Security Announcements Apr 13, 2021 | 17:00 pm
Project: Joomla!SubProject: CMSImpact: LowSeverity: LowVersions: 3.0.0 - 3.9.25Exploit type: XSSReported Date: 2021-03-09Fixed Date: 2021-04-13CVE Number: CVE-2021-26030DescriptionInadequate escaping allowed XSS attacks using the logo parameter of the default templates on error pages.Affected InstallsJoomla! CMS versions 3.0.0 - 3.9.25SolutionUpgrade to version 3.9.26ContactThe JSST at[…]
Read more...
[20210307] - Core - ACL violation within com_content frontend editing
Security Announcements Mar 2, 2021 | 16:00 pm
Project: Joomla!SubProject: CMSImpact: ModerateSeverity: LowVersions: 3.0.0 - 3.9.24Exploit type: ACL violationReported Date: 2020-10-25Fixed Date: 2021-03-02CVE Number: CVE-2021-26027DescriptionIncorrect ACL checks could allow unauthorized change of the category for an article.Affected InstallsJoomla! CMS versions 3.0.0 - 3.9.24SolutionUpgrade to version 3.9.25ContactThe JSST at[…]
Read more...