joomla has 2 CVEs on record. The median CVSS is 6.1 (medium).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- joomla! 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
joomla vulnerabilities
CVEs affecting joomla, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2025-63083Medium· 6.1Lack of output escaping leads to a XSS vector in the pagebreak plugin.
Lack of output escaping leads to a XSS vector in the pagebreak plugin.
▾ Sunlitjoomla · joomla!EPSS 0.21%via NVD
CVE-2025-63082Medium· 6.1Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.
Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags.
▾ Sunlitjoomla · joomla!EPSS 0.21%via NVD