Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Joomla Number Of NVD 260 CRITICAL 27 HIGH 67 MEDIUM 164 LOW 2
URL https://www.joomla.org/
Explanation Joomla is an open source Content Management System (CMS).

Each major version is supported for at least four years.

Basically, it is recommended to use the latest version.
Tag
  • GPL v2
  • PHP
  • オープンソース
Add Information URL
No Type Name URL
1 https://downloads.joomla.org/
2 https://www.joomla.org/announcements/release-news/
3 https://docs.joomla.org/Joomla!_CMS_versions
4 http://feeds.joomla.org/JoomlaSecurityNews
5 http://www.joomla.jp/
6 https://developer.joomla.org/roadmap.html
7 https://docs.joomla.org/Release_and_support_cycle
8 https://github.com/joomla
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
241 Joomla 5.1 5.1.4 Aug. 27, 2024 April 16, 2024 0 4 7 0
242 Joomla 5.0 5.0.3 July 9, 2024 Oct. 17, 2023 April 16, 2024 0 5 7 0
243 Joomla 4.4 4.4.13 April 8, 2025 Oct. 17, 2023 Oct. 17, 2025 0 5 7 0
244 Joomla 4.3 4.3.4 Aug. 22, 2023 April 18, 2023 Oct. 17, 2023 0 6 8 0
245 Joomla 4.2 4.4.6 July 9, 2024 Aug. 16, 2022 April 18, 2023 0 6 15 0
246 Joomla 4.1 4.1.5 June 21, 2022 Feb. 15, 2022 Aug. 16, 2022 3 6 17 0
247 Joomla 4.0 4.0.6 Jan. 18, 2022 Aug. 17, 2021 Feb. 15, 2022 4 6 17 0
248 Joomla 3.10 3.10.11 Aug. 16, 2022 Aug. 17, 2021 Aug. 17, 2023 2 6 8 0
249 Joomla 3.9 3.9.28 July 6, 2021 Oct. 30, 2018 Aug. 17, 2023 11 25 63 0
250 Joomla 3.8 3.8.13 Oct. 9, 2018 Sept. 19, 2017 Oct. 30, 2018 13 32 71 0
251 Joomla 3.7 3.7.5 Aug. 17, 2017 April 25, 2017 Sept. 19, 2017 15 33 70 1
252 Joomla 3.6 3.6.5 Dec. 13, 2016 July 12, 2016 April 25, 2017 19 34 74 0
253 Joomla 3.5 3.5.1 April 5, 2016 March 21, 2016 July 12, 2016 19 34 72 0
254 Joomla 3.4 3.4.8 Dec. 24, 2015 Feb. 24, 2015 March 21, 2016 19 40 78 0
255 Joomla 3.3 3.3.4 Sept. 23, 2014 April 20, 2014 Feb. 24, 2015 18 41 78 0
256 Joomla 3.2 3.2.1 Dec. 18, 2014 Nov. 6, 2013 Oct. 31, 2014 18 43 80 0
257 Joomla 3.1 3.1.6 Nov. 6, 2013 April 24, 2013 Dec. 31, 2013 15 34 71 0
258 Joomla 3.0 3.0.3 Feb. 4, 2013 Sept. 27, 2012 May 31, 2013 15 34 76 0
259 Joomla 2.5 2.5.28 Dec. 10, 2014 Jan. 24, 2012 Dec. 31, 2014 13 30 58 0
260 Joomla 1.7 1.7.5 Feb. 2, 2012 July 19, 2011 Feb. 29, 2012 10 17 29 0
261 Joomla 1.6 1.6.6 July 26, 2011 Jan. 10, 2011 Aug. 31, 2011 10 14 30 0
262 Joomla 1.5 1.5.26 March 27, 2012 Jan. 22, 2008 Sept. 30, 2012 11 19 35 1
263 Joomla 1.0 1.0.15 Feb. 21, 2008 Sept. 17, 2005 July 22, 2009 5 15 30 0
264 Joomla 13.1 13.1 0 0 0 0
265 Joomla 12.3 12.3 0 0 0 0
266 Joomla 12.1 12.1 0 0 0 0
267 Joomla 11.4 11.4 0 0 0 0
268 Joomla 11.3 11.3 0 0 0 0
269 Joomla 11.2 11.2 0 0 0 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
241 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as dem… CWE-79
Cross-site Scripting 		CVE-2011-2509 cpe:2.3:a:joomla:joomla\!:1.6:rc1
cpe:2.3:a:joomla:joomla\!:1.6:beta9
cpe:2.3:a:joomla:joomla\!:1.6:beta8
cpe:… 		1.6.3 2024-11-21 10:28
2011-07-28 		Show GitHub Exploit DB Packet Storm
242 -
5.0 		MEDIUM Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2011-2488 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		1.5.22 2024-11-21 10:28
2011-07-28 		Show GitHub Exploit DB Packet Storm
243 -
7.5 		HIGH Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_cont… CWE-89
SQL Injection 		CVE-2010-4696 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:21
2011-01-19 		Show GitHub Exploit DB Packet Storm
244 -
7.5 		HIGH Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to … CWE-89
SQL Injection 		CVE-2010-4166 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:20
2011-01-19 		Show GitHub Exploit DB Packet Storm
245 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded e… CWE-79
Cross-site Scripting 		CVE-2010-3712 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:19
2010-10-28 		Show GitHub Exploit DB Packet Storm
246 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens. CWE-79
Cross-site Scripting 		CVE-2010-2535 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:16
2010-10-6 		Show GitHub Exploit DB Packet Storm
247 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various… CWE-79
Cross-site Scripting 		CVE-2010-1649 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2023-11-7 11:05
2010-06-8 		Show GitHub Exploit DB Packet Storm
248 -
5.0 		MEDIUM Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request. CWE-200
Information Exposure 		CVE-2009-3946 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		1.5.14 2026-04-23 09:35
2009-11-17 		Show GitHub Exploit DB Packet Storm
249 -
5.5 		MEDIUM Unspecified vulnerability in the Front-End Editor in the com_content component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitr… NVD-CWE-noinfo
CVE-2009-3945 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		1.5.14 2026-04-23 09:35
2009-11-17 		Show GitHub Exploit DB Packet Storm
250 7.5
5.0 		HIGH
Network 		Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an htt… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2008-4122 cpe:2.3:a:joomla:joomla\!:1.5.8:* 2026-04-23 09:35
2008-12-20 		Show GitHub Exploit DB Packet Storm