Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-25227

Fixed upstream EPSS <1%CVSS 7.5

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

Published 2025-04-08 · CVE record · OSV

Products: Joomla! Project Joomla! CMS

Fixed upstream

EcosystemPackageFixed in
Packagistjoomla/joomla-cms5.2.6
Packagistjoomla/joomla-cms4.4.13