CVE-2026-35220

概要

参考情報

• developer.joomla.org/security-centre/1037-20260505-core-csrf-in-user-activation-endpoint · Vendor Advisory

joomla! のその他の脆弱性

• CVE-2026-92232中 6.5Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0…
• CVE-2026-92231中 6.7Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - Th…
• CVE-2026-92227高 7.5Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The premature i…
• CVE-2026-92226中 6.0Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper acc…
• CVE-2026-92225中 6.7Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not properly escape us…