Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://developer.joomla.org/security-centre/20260802-core-improper-cors-origin-validation.html Vendor Advisory, Broken Link
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.9 · joomlaNVD modified 2026-10-22 22:10
Affected (CPE criteria) 1
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*
References 2
- https://developer.joomla.org/security-centre/20260802-core-improper-cors-origin-validation.html Vendor Advisory, Broken Link
- https://www.joomla.org/ Product