According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities :

- ACL violation in access levels affects Joomla 2.5.0 through 3.8.7

- Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7

- Information Disclosure about unpublished tags affects Joomla 3.1.0 through 3.8.7

- Installer leak of plain text password to local user affects Joomla 3.0.0 through 3.8.7

- XSS Vulnerabilities & additional hardening affects Joomla 3.0.0 through 3.8.7

- Filter field in com_fields allowing remote code execution affects Joomla 3.7.0 through 3.8.7

- Session deletion race condition affects Joomla 3.0.0 through 3.8.7

- Possible XSS attack in the redirect method affects Joomla 3.1.2 through 3.8.7

- XSS vulnerability in the media manager affects Joomla 1.5.0 through 3.8.7

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS
    vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default
    Administrator user group to perform a XSS attack. (CVE-2018-11326)

根據其自我報告的版本號碼，遠端網頁伺服器上執行的 Joomla! 版本比 3.8.8 舊。因此，會受到多個弱點影響。請注意，Nessus 並未嘗試惡意利用這些問題，而是僅依據應用程式自我報告的版本號碼。

根据其自我报告的版本号，远程 web 服务器上运行的 Joomla! 安装版本低于 3.8.8。因而会受到多个漏洞的影响。请注意，Nessus 并不试图利用这些问题，而只依赖于应用程序自我报告的版本号。

自己報告されたバージョン番号によると、リモートのWebサーバーで実行されているJoomla!インストールのバージョンは3.8.8より前です。したがって、複数の脆弱性の影響を受けます。Nessusはこれらの問題を利用しておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

According to its self-reported version number, the Joomla! installation running on the remote web server is prior to 3.8.8. It is, therefore, affected by a multiple vulnerabilities.

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
98503	Joomla! 1.7.x < 3.8.8 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2018	3/14/2023	critical
98494	Joomla! 3.7.x < 3.8.8 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	11/5/2018	3/14/2023	critical
434682	SCA: security update for joomla/joomla-cms (GHSA-g3m5-vvj7-xrwv)	Tenable Self-Hosted Container Security	SCA Checks	8/19/2025	7/2/2026	medium
434682	SCA: security update for joomla/joomla-cms (GHSA-g3m5-vvj7-xrwv)	Tenable Cloud Security	SCA Checks	8/19/2025	7/2/2026	medium
110227	Joomla! < 3.8.8 多個弱點	Nessus	CGI abuses	5/31/2018	5/14/2025	critical
110227	Joomla! < 3.8.8 多个漏洞	Nessus	CGI abuses	5/31/2018	5/14/2025	critical
110227	Joomla! < 3.8.8の複数の脆弱性	Nessus	CGI abuses	5/31/2018	5/14/2025	critical
110227	Joomla! < 3.8.8 Multiple Vulnerabilities	Nessus	CGI abuses	5/31/2018	5/14/2025	critical

Detections

Analytics

Plugins Search

critical

critical

medium

medium

critical

critical

critical

critical