joomla_cms vulnerabilities

CVEs whose affected-version data names the joomla_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73336Medium· 5.1

2mo ago

Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vector in schema.org markup outputs.

▾ SunlitJoomla! Project · Joomla! CMSEPSS 0.27%via CVEORG