CVE-2021-23123

No fix known EPSS 1%

An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of com_modules leak names of unpublished and/or inaccessible modules.

Published 2021-01-12 · CVE record · OSV

Products: Joomla! Project Joomla! CMS