Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Joomla

Joomla is an award-winning content management system (CMS) which enables you to build Web sites and powerful online applications. Many aspects including its ease-of-use and extensibility have made Joomla the most popular Web site software available. Best of all Joomla is an open source solution that is freely available to everyone.

Official Site:

https://www.joomla.org/

Severity Summary:

Critical: 70 High: 164 Medium: 433 Low: 10 Information: 16
Reference
Title
Severity
CVE-2024-21729
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-26035
Joomla Core 3.x.x Cross-Site Scripting
Medium
CVE-2021-26034
Joomla Core 3.x.x Cross-Site Request Forgery
Medium
CVE-2021-26033
Joomla Core 3.x.x Cross-Site Request Forgery
Medium
CVE-2021-26032
Joomla Core 3.x.x Cross-Site Scripting
Medium
CVE-2021-26031
Joomla Core 3.x.x Local File Inclusion
Medium
CVE-2021-26030
Joomla Core 3.x.x Cross-Site Scripting
Medium
CVE-2021-23131
Joomla Core 3.x.x Security Bypass
Medium
CVE-2021-23129
Joomla Core Cross-Site Scripting
Medium
CVE-2021-26028
Joomla Core 3.x.x Directory Traversal
Medium
CVE-2021-23130
Joomla Core Cross-Site Scripting
Medium
CVE-2021-26027
Joomla Core 3.x.x Security Bypass
Medium
CVE-2021-26029
Joomla Core Security Bypass
Medium
CVE-2023-23751
Joomla Incorrect Authorization Vulnerability
Medium
CVE-2024-21724
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-23124
Joomla Core 3.9.x Cross-Site Scripting
Medium
CVE-2026-35220
Joomla Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2026-48949
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48950
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48951
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48952
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48953
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48954
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48955
Joomla Vulnerability
Medium
CVE-2026-48956
Joomla Vulnerability
Medium
CVE-2026-25900
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-25901
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-30894
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-30895
Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2026-48900
Joomla Vulnerability
Medium