Security Advisory

CVE-2021-26033

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-26 10:22:34

Last updated 2026-02-25 05:04:37

Assigner Joomla

State PUBLISHED

An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.