Description

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Incorrect ACL checks could allow unauthorized change of the category for an article.

Remediation

References

CVE-2021-26027

Related Vulnerabilities

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4209)

phpList Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-6178)

WordPress Plugin Category and Page Icons Cross-Site Scripting (0.9.2)

WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Multiple Vulnerabilities (4.9.3)

WordPress Plugin Integration for Contact Form 7 and Mailchimp Cross-Site Scripting (1.0.9)

Severity

Medium

Classification

CVE-2021-26027 CWE-863 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities