An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.9.27. It is, therefore, affected by multiple vulnerabilities.

- HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors. (CVE-2021-26032)

- A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint. (CVE-2021-26033)

- A missing token check causes a CSRF vulnerability in data download endpoints in com_banners and com_sysinfo. (CVE-2021-26034)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.9.27. It is, therefore, affected by multiple vulnerabilities.

  - HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors.
    (CVE-2021-26032)

  - A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint. (CVE-2021-26033)

  - A missing token check causes a CSRF vulnerability in data download endpoints in com_banners and     com_sysinfo. (CVE-2021-26034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
112797	Joomla! 3.x < 3.9.27 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	medium
149899	Joomla 3.0.x < 3.9.27 Multiple Vulnerabilities (5836-joomla-3-9-27)	Nessus	CGI abuses	Remote	medium

Detections

Analytics

CVE-2021-26033

medium

Tenable Plugins

medium

medium