CVE-2022-27910

MEDIO 6.1CVE-2022-27910 · Published 10/07/2022 · updated 17/06/2026

En resumen

CVE-2022-27910 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a docman (joomlatools).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.56%, mayor que el 46.6% de las vulnerabilidades.
Solución: actualizar a 3.5.14 o posterior.

Package	Affected versions	Patched versions
docman joomlatools	`< 3.5.14`	`3.5.14`

Description

In Joomla component 'Joomlatools - DOCman 3.5.13 (and likely most versions below)' are affected to an reflected Cross-Site Scripting (XSS) in an image upload function

References

joomlatools.com/extensions/docman/changelog/3.5.14 · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free