Description
An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access com_actionlogs.
Remediation
References
Related Vulnerabilities
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.8)
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-68160)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34093)
WordPress 4.2.x Cross-Domain Flash Injection Vulnerability (4.2 - 4.2.18)
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5323)