Security Advisory

CVE-2026-35220

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-26 16:45:19
Last updated 2026-05-27 09:14:34
Assigner Joomla
CVSS score 4.6
State PUBLISHED

Description

Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.