Software Detail

Software Informaton Top

CMS

Software Detail

Joomla

Number Of NVD

285

CRITICAL

HIGH

MEDIUM

178

LOW

URL	https://www.joomla.org/
Explanation	Joomla is an open source Content Management System (CMS). Each major version is supported for at least four years. Basically, it is recommended to use the latest version.
Tag	オープンソース GPL v2 PHP

Add Information URL

No	Type	Name	URL
1			https://downloads.joomla.org/
2			https://www.joomla.org/announcements/release-news/
3			https://docs.joomla.org/Joomla!_CMS_versions
4			http://feeds.joomla.org/JoomlaSecurityNews
5			http://www.joomla.jp/
6			https://developer.joomla.org/roadmap.html
7			https://docs.joomla.org/Release_and_support_cycle
8			https://github.com/joomla

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Critical	High	Medium	Low
71	Joomla 5.1	5.1.4	Aug. 27, 2024	April 16, 2024		5	10	19	0
72	Joomla 5.0	5.0.3	July 9, 2024	Oct. 17, 2023	April 16, 2024	5	11	19	0
73	Joomla 4.4	4.4.13	April 8, 2025	Oct. 17, 2023	Oct. 17, 2025	5	11	19	0
74	Joomla 4.3	4.3.4	Aug. 22, 2023	April 18, 2023	Oct. 17, 2023	5	12	20	0
75	Joomla 4.2	4.4.6	July 9, 2024	Aug. 16, 2022	April 18, 2023	5	12	27	0
76	Joomla 4.1	4.1.5	June 21, 2022	Feb. 15, 2022	Aug. 16, 2022	8	12	28	0
77	Joomla 4.0	4.0.6	Jan. 18, 2022	Aug. 17, 2021	Feb. 15, 2022	9	12	27	0
78	Joomla 3.10	3.10.11	Aug. 16, 2022	Aug. 17, 2021	Aug. 17, 2023	6	7	13	0
79	Joomla 3.9	3.9.28	July 6, 2021	Oct. 30, 2018	Aug. 17, 2023	15	26	68	0
80	Joomla 3.8	3.8.13	Oct. 9, 2018	Sept. 19, 2017	Oct. 30, 2018	17	33	76	0
81	Joomla 3.7	3.7.5	Aug. 17, 2017	April 25, 2017	Sept. 19, 2017	19	34	75	1
82	Joomla 3.6	3.6.5	Dec. 13, 2016	July 12, 2016	April 25, 2017	23	35	79	0
83	Joomla 3.5	3.5.1	April 5, 2016	March 21, 2016	July 12, 2016	23	35	77	0
84	Joomla 3.4	3.4.8	Dec. 24, 2015	Feb. 24, 2015	March 21, 2016	23	41	83	0
85	Joomla 3.3	3.3.4	Sept. 23, 2014	April 20, 2014	Feb. 24, 2015	22	42	83	0
86	Joomla 3.2	3.2.1	Dec. 18, 2014	Nov. 6, 2013	Oct. 31, 2014	22	44	85	0
87	Joomla 3.1	3.1.6	Nov. 6, 2013	April 24, 2013	Dec. 31, 2013	18	35	76	0
88	Joomla 3.0	3.0.3	Feb. 4, 2013	Sept. 27, 2012	May 31, 2013	18	35	81	0
89	Joomla 2.5	2.5.28	Dec. 10, 2014	Jan. 24, 2012	Dec. 31, 2014	13	30	58	0
90	Joomla 1.7	1.7.5	Feb. 2, 2012	July 19, 2011	Feb. 29, 2012	10	17	29	0
91	Joomla 1.6	1.6.6	July 26, 2011	Jan. 10, 2011	Aug. 31, 2011	10	14	30	0
92	Joomla 1.5	1.5.26	March 27, 2012	Jan. 22, 2008	Sept. 30, 2012	11	19	35	1
93	Joomla 1.0	1.0.15	Feb. 21, 2008	Sept. 17, 2005	July 22, 2009	5	15	30	0
94	Joomla 13.1	13.1				0	0	0	0
95	Joomla 12.3	12.3				0	0	0	0
96	Joomla 12.1	12.1				0	0	0	0
97	Joomla 11.4	11.4				0	0	0	0
98	Joomla 11.3	11.3				0	0	0	0
99	Joomla 11.2	11.2				0	0	0	0

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or higher	less than	Update date Published date	Show Affected	Exploit PoC Search
71	5.3 5.0	MEDIUM Network	An issue was discovered in Joomla! 1.6.0 through 3.9.24. Inadequate filtering of form contents could allow to overwrite the author field.	NVD-CWE-Other	CVE-2021-26029	cpe:2.3:a:joomla:joomla\!::	1.6.0	3.9.25	2024-11-21 14:55 2021-03-5	Show	GitHub Exploit DB Packet Storm

72	5.5 4.3	MEDIUM Local	An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.	CWE-22 Path Traversal	CVE-2021-26028	cpe:2.3:a:joomla:joomla\!::	3.0.0	3.9.25	2024-11-21 14:55 2021-03-5	Show	GitHub Exploit DB Packet Storm

73	5.3 5.0	MEDIUM Network	An issue was discovered in Joomla! 3.0.0 through 3.9.24. Incorrect ACL checks could allow unauthorized change of the category for an article.	CWE-863 Incorrect Authorization	CVE-2021-26027	cpe:2.3:a:joomla:joomla\!::	3.0.0	3.9.25	2024-11-21 14:55 2021-03-5	Show	GitHub Exploit DB Packet Storm

74	7.5 5.0	HIGH Network	An issue was discovered in Joomla! 3.0.0 through 3.9.24. com_media allowed paths that are not intended for image uploads	NVD-CWE-noinfo	CVE-2021-23132	cpe:2.3:a:joomla:joomla\!::	3.0.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm

75	7.5 5.0	HIGH Network	An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager.	CWE-20 Improper Input Validation	CVE-2021-23131	cpe:2.3:a:joomla:joomla\!::	3.2.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm

76	6.1 4.3	MEDIUM Network	An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues.	CWE-79 Cross-site Scripting	CVE-2021-23130	cpe:2.3:a:joomla:joomla\!::	2.5.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm

77	6.1 4.3	MEDIUM Network	An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead to xss issues.	CWE-79 Cross-site Scripting	CVE-2021-23129	cpe:2.3:a:joomla:joomla\!::	2.5.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm

78	9.1 6.4	CRITICAL Network	An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been …	NVD-CWE-noinfo	CVE-2021-23128	cpe:2.3:a:joomla:joomla\!::	3.2.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm

79	9.1 6.4	CRITICAL Network	An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes.	NVD-CWE-noinfo	CVE-2021-23127	cpe:2.3:a:joomla:joomla\!::	3.2.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm

80	5.3 5.0	MEDIUM Network	An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2021-23126	cpe:2.3:a:joomla:joomla\!::	3.2.0	3.9.25	2024-11-21 14:51 2021-03-5	Show	GitHub Exploit DB Packet Storm