DeutschShown in its original language — a full translation is planned for a future version.
Joomla: Mehrere Schwachstellen
view advisory published 2026-07-07
Ein entfernter Angreifer kann mehrere Schwachstellen in Joomla ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsmechanismen zu umgehen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-48958US | high8.8 | — | ||
An improper access check allows unauthorized users to create custom fields via webservices endpoints. | ||||
| CVE-2026-48957US | high8.8 | — | ||
An improper access check allows unauthorized users to access com_privacy datasets. | ||||
| CVE-2026-48956US | medium5.0 | — | ||
An improper access check allows users to display a list of modules in the frontend. | ||||
| CVE-2026-48955US | medium6.5 | — | ||
An improper access check allows unauthorized users to access workflow stage and transition information. | ||||
| CVE-2026-48954US | medium6.1 | — | ||
Improper validation leads to a generic XSS vector in the language override feature. | ||||
| CVE-2026-48953US | medium6.1 | — | ||
Lack of escaping leads to an XSS vulnerability in the generic image output layout. | ||||
| CVE-2026-48952US | medium6.1 | — | ||
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer. | ||||
| CVE-2026-48951US | medium6.1 | — | ||
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components. | ||||
| CVE-2026-48950US | medium6.1 | — | ||
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates. | ||||
| CVE-2026-48949US | medium6.1 | — | ||
Lack of validation leads to an XSS vulnerability in the MFA management views. | ||||
| CVE-2026-48948US | high8.8 | — | ||
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible. | ||||
| CVE-2026-48947US | medium4.9 | — | ||
An improper access check allows privileged users to overwrite media files without editing permissions. | ||||
02
references
External citations — patches, advisories, analysis.
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
- Joomla Security Announcements vom 2026-07-07external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan