| Package | Affected versions | Patched versions |
|---|---|---|
| joomla! | ≥ 3.2.0, ≤ 3.9.4 |
An issue was discovered in Joomla! before 3.9.5. The "refresh list of helpsites" endpoint of com_users lacks access checks, allowing calls from unauthenticated users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free