Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Joomla Number Of NVD 273 CRITICAL 32 HIGH 70 MEDIUM 169 LOW 2
URL https://www.joomla.org/
Explanation Joomla is an open source Content Management System (CMS).

Each major version is supported for at least four years.

Basically, it is recommended to use the latest version.
Tag
  • PHP
  • オープンソース
  • GPL v2
Add Information URL
No Type Name URL
1 https://downloads.joomla.org/
2 https://www.joomla.org/announcements/release-news/
3 https://docs.joomla.org/Joomla!_CMS_versions
4 http://feeds.joomla.org/JoomlaSecurityNews
5 http://www.joomla.jp/
6 https://developer.joomla.org/roadmap.html
7 https://docs.joomla.org/Release_and_support_cycle
8 https://github.com/joomla
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
251 Joomla 5.1 5.1.4 Aug. 27, 2024 April 16, 2024 5 7 11 0
252 Joomla 5.0 5.0.3 July 9, 2024 Oct. 17, 2023 April 16, 2024 5 8 11 0
253 Joomla 4.4 4.4.13 April 8, 2025 Oct. 17, 2023 Oct. 17, 2025 5 8 11 0
254 Joomla 4.3 4.3.4 Aug. 22, 2023 April 18, 2023 Oct. 17, 2023 5 9 12 0
255 Joomla 4.2 4.4.6 July 9, 2024 Aug. 16, 2022 April 18, 2023 5 9 19 0
256 Joomla 4.1 4.1.5 June 21, 2022 Feb. 15, 2022 Aug. 16, 2022 8 9 21 0
257 Joomla 4.0 4.0.6 Jan. 18, 2022 Aug. 17, 2021 Feb. 15, 2022 9 9 21 0
258 Joomla 3.10 3.10.11 Aug. 16, 2022 Aug. 17, 2021 Aug. 17, 2023 6 6 12 0
259 Joomla 3.9 3.9.28 July 6, 2021 Oct. 30, 2018 Aug. 17, 2023 15 25 67 0
260 Joomla 3.8 3.8.13 Oct. 9, 2018 Sept. 19, 2017 Oct. 30, 2018 17 32 75 0
261 Joomla 3.7 3.7.5 Aug. 17, 2017 April 25, 2017 Sept. 19, 2017 19 33 74 1
262 Joomla 3.6 3.6.5 Dec. 13, 2016 July 12, 2016 April 25, 2017 23 34 78 0
263 Joomla 3.5 3.5.1 April 5, 2016 March 21, 2016 July 12, 2016 23 34 76 0
264 Joomla 3.4 3.4.8 Dec. 24, 2015 Feb. 24, 2015 March 21, 2016 23 40 82 0
265 Joomla 3.3 3.3.4 Sept. 23, 2014 April 20, 2014 Feb. 24, 2015 22 41 82 0
266 Joomla 3.2 3.2.1 Dec. 18, 2014 Nov. 6, 2013 Oct. 31, 2014 22 43 84 0
267 Joomla 3.1 3.1.6 Nov. 6, 2013 April 24, 2013 Dec. 31, 2013 18 34 75 0
268 Joomla 3.0 3.0.3 Feb. 4, 2013 Sept. 27, 2012 May 31, 2013 18 34 80 0
269 Joomla 2.5 2.5.28 Dec. 10, 2014 Jan. 24, 2012 Dec. 31, 2014 13 30 58 0
270 Joomla 1.7 1.7.5 Feb. 2, 2012 July 19, 2011 Feb. 29, 2012 10 17 29 0
271 Joomla 1.6 1.6.6 July 26, 2011 Jan. 10, 2011 Aug. 31, 2011 10 14 30 0
272 Joomla 1.5 1.5.26 March 27, 2012 Jan. 22, 2008 Sept. 30, 2012 11 19 35 1
273 Joomla 1.0 1.0.15 Feb. 21, 2008 Sept. 17, 2005 July 22, 2009 5 15 30 0
274 Joomla 13.1 13.1 0 0 0 0
275 Joomla 12.3 12.3 0 0 0 0
276 Joomla 12.1 12.1 0 0 0 0
277 Joomla 11.4 11.4 0 0 0 0
278 Joomla 11.3 11.3 0 0 0 0
279 Joomla 11.2 11.2 0 0 0 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
251 -
5.0 		MEDIUM The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving th… CWE-200
Information Exposure 		CVE-2011-2890 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		1.5.23 2024-11-21 10:29
2011-07-28 		Show GitHub Exploit DB Packet Storm
252 -
5.0 		MEDIUM templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, lead… CWE-200
Information Exposure 		CVE-2011-2889 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		1.5.22 2024-11-21 10:29
2011-07-28 		Show GitHub Exploit DB Packet Storm
253 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable throug… CWE-79
Cross-site Scripting 		CVE-2011-2710 cpe:2.3:a:joomla:joomla\!:1.6:rc1
cpe:2.3:a:joomla:joomla\!:1.6:beta9
cpe:2.3:a:joomla:joomla\!:1.6:beta8
cpe:… 		1.6.6 2024-11-21 10:28
2011-07-28 		Show GitHub Exploit DB Packet Storm
254 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.6.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the com_contact component, as dem… CWE-79
Cross-site Scripting 		CVE-2011-2509 cpe:2.3:a:joomla:joomla\!:1.6:rc1
cpe:2.3:a:joomla:joomla\!:1.6:beta9
cpe:2.3:a:joomla:joomla\!:1.6:beta8
cpe:… 		1.6.3 2024-11-21 10:28
2011-07-28 		Show GitHub Exploit DB Packet Storm
255 -
5.0 		MEDIUM Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2011-2488 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		1.5.22 2024-11-21 10:28
2011-07-28 		Show GitHub Exploit DB Packet Storm
256 -
7.5 		HIGH Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the (1) filter_order or (2) filter_order_Dir parameter in a com_cont… CWE-89
SQL Injection 		CVE-2010-4696 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:21
2011-01-19 		Show GitHub Exploit DB Packet Storm
257 -
7.5 		HIGH Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to … CWE-89
SQL Injection 		CVE-2010-4166 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:20
2011-01-19 		Show GitHub Exploit DB Packet Storm
258 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded e… CWE-79
Cross-site Scripting 		CVE-2010-3712 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:19
2010-10-28 		Show GitHub Exploit DB Packet Storm
259 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens. CWE-79
Cross-site Scripting 		CVE-2010-2535 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2024-11-21 10:16
2010-10-6 		Show GitHub Exploit DB Packet Storm
260 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various… CWE-79
Cross-site Scripting 		CVE-2010-1649 cpe:2.3:a:joomla:joomla\!:1.5.9:*
cpe:2.3:a:joomla:joomla\!:1.5.8:*
cpe:2.3:a:joomla:joomla\!:1.5.7:*
cpe:2.3:… 		2023-11-7 11:05
2010-06-8 		Show GitHub Exploit DB Packet Storm