Joomla

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions7
First seenAug 17, 2026
Last mentionedSep 25, 2026

Timeline

7 articles · newest first

[20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs

Joomla patches an InputFilter XSS bypass using whitespace in HTML data URIs, CVE-2026-92232.

Joomla Security CentreSep 25, 14:00 UTC · Sep 25, 2026Advisory 12 sourcesCVE-2026-922322

[20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch

Joomla fixes an InputFilter XSS bypass from an HTML5 entity-decoding mismatch, CVE-2026-92231.

Joomla Security CentreSep 25, 14:00 UTC · Sep 25, 2026Advisory 12 sourcesCVE-2026-922311

[20260810] - Core - Unrestricted uploads of SHTML files

Joomla fixed CVE-2026-73373, an unrestricted SHTML file upload flaw affecting CMS 1.0.0-5.4.7 and 6.0.0-6.1.2 that can enable code execution.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026AdvisoryCVE-2026-733733 · 1 read

[20260809] - Core - Improper ACL checks when injection schema.org contact data

Joomla fixed CVE-2026-73372, an improper ACL check that leaks inaccessible contact items' data into schema.org snippets, affecting CMS 5.1.0-5.4.7 and 6.0.0-6.1.2.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026AdvisoryCVE-2026-733722 · 1 read

[20260808] - Core - Improper ACL checks for batch copy actions

Joomla fixed CVE-2026-73371, an improper ACL check letting unauthorized users batch-copy uneditable items in Joomla CMS 4.0.0-5.4.7 and 6.0.0-6.1.2.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026AdvisoryCVE-2026-733711

[20260807] - Core - MFA Authentication Bypass

Joomla fixed CVE-2026-73337, an MFA authentication bypass caused by insufficient state checks, affecting Joomla CMS 4.0.0-5.4.7 and 6.0.0-6.1.2.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026AdvisoryCVE-2026-733371 · 1 read

[20260806] - Core - XSS through schema.org outputs

Joomla fixed CVE-2026-73336, an XSS in schema.org markup outputs caused by improper escaping, affecting CMS 5.1.0-5.4.7 and 6.0.0-6.1.2.

Joomla Security CentreAug 17, 14:00 UTC · Aug 17, 2026AdvisoryCVE-2026-733361

Related CVEs

by mentions

CVE-2026-73373<1%8.9
Unrestricted SHTML upload leading to server code execution in Joomla CMS
published Aug 18, 2026Joomla! (all lines through 5.x)
CVE-2026-73337<1%8.2
MFA/2FA Authentication Bypass in Joomla CMS Core
published Aug 18, 2026Joomla! CMS (core)
CVE-2026-922327.1
XSS Filter Bypass in Joomla Core InputFilter
published Sep 29, 2026Joomla! Core
CVE-2026-922317.1
XSS filter bypass in Joomla Core InputFilter
published Sep 29, 2026Joomla! Core
CVE-2026-73372<1%5.1
Improper ACL check leaks restricted contact data via schema.org in Joomla! Core
published Aug 18, 2026Joomla! Core
CVE-2026-73371<1%5.1
Improper ACL check enables unauthorized batch copy in Joomla! core
published Aug 18, 2026Joomla! (core)
CVE-2026-73336<1%5.1
Stored XSS via schema.org markup output in Joomla! core 5.1.0–5.4.7 and 6.0.0–6.1.2
published Aug 18, 2026Joomla! CMS

Appears with

Joomlavendor · 7
Joomla CMSproduct · 7

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Sep 25, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.