Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-26033

No fix known EPSS <1%

An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.

Published 2021-05-26 · CVE record · OSV

Products: Joomla! Project Joomla! CMS