David Jardin

**Nome do Software Vulnerável e Versões Afetadas** Widget Factory Joomla Content Editor (JCE) versões 1.0.0 até 2.9.99.4 **Description** Um controle de acesso inadequado na extensão do editor JCE para Joomla permite que usuários não autenticados criem novos perfis de editor. Essa falha possibilita o upload e a execução de código PHP arbitrário no servidor afetado. O problema tem sido explorado ativamente para a instalação de web shells e o estabelecimento de backdoors persistentes para acesso e controle não autorizados contínuos. **Recommendations** Atualize o Widget Factory Joomla Content Editor (JCE) para a versão 2.9.99.5. Revise os logs de acesso e os perfis do editor em busca de sinais de atividade de usuário não autorizada.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla (affected versions not specified) **Description** The issue allows unauthorized actors to obtain the number of subscribers in a specific list, exposing sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla (affected versions not specified) **Description** The issue is related to an Improper Access Control vulnerability in the AcyMailing Enterprise component for Joomla. It allows unauthorized removal of attachments from campaigns. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla (affected versions not specified) **Description** The issue is related to an Improper Access Control vulnerability in the AcyMailing Enterprise component for Joomla. This vulnerability allows unauthorized users to create new mailing lists. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AcyMailing Enterprise component for Joomla versions 6.7.0 through 8.6.3 **Description** The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting (XSS). This enables potential attackers to inject malicious scripts into web pages. **Recommendations** For versions 6.7.0 through 8.6.3, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.

**Nome do software vulnerável e versões afetadas** Joomla! versões 3.0.0 a 3.9.24 **Descrição** Foi descoberta uma falha em que verificações incorretas de ACL poderiam permitir a alteração não autorizada da categoria de um artigo. **Recomendações** Para as versões do Joomla! 3.0.0 a 3.9.24, atualize para uma versão que inclua a correção para esta falha, a fim de impedir alterações não autorizadas nas categorias dos artigos.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.9.3 **Description** An issue was discovered where the phar:// stream wrapper can be used for object injection attacks due to the lack of a protection mechanism. This allows the phar:// handler to be used for non .phar-files, potentially leading to exploitation. **Recommendations** For versions prior to 3.9.3, update to version 3.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the phar:// stream wrapper to minimize the risk of object injection attacks.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.8.13 **Description** An issue in com contact allows mail submission in disabled forms due to inadequate checks. **Recommendations** For versions prior to 3.8.13, update to version 3.8.13 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions prior to 3.8.8 **Description** The issue is related to inadequate filtering of file and folder names, which leads to various XSS attack vectors in the media manager. **Recommendations** For versions prior to 3.8.8, update to version 3.8.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions prior to 3.8.8 **Description** A lack of escaping the user-info component of the URI could result in an XSS issue under specific circumstances, such as when a redirect is issued with a URI containing a username and password, and the Location: header cannot be used. **Recommendations** For versions prior to 3.8.8, update to version 3.8.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core versions prior to 3.8.8 **Description** A race condition issue was discovered, related to long-running background processes such as remote checks for core or extension updates. This could lead to the recreation of a session that was expected to be destroyed. **Recommendations** For versions prior to 3.8.8, update to version 3.8.8 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions prior to 3.8.4 **Description** The issue is related to a lack of escaping in the module chromes, which leads to XSS vulnerabilities in the module system. **Recommendations** For versions prior to 3.8.4, update to version 3.8.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 3.2.0 through 3.6.5 **Description** The issue is related to inadequate escaping of file and folder names, which leads to XSS vulnerabilities in the template manager component. **Recommendations** For versions 3.2.0 through 3.6.5, update to version 3.7.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 1.6 through 1.7.3 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. **Recommendations** For Joomla! versions 1.6 through 1.7.3, update to version 1.7.4 or later to resolve the issue.