PT-2021-16922 · Joomla · Joomla!

Published 2021-03-04 · Updated 2025-04-03 · CVE-2021-26029

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.6.0 through 3.9.24

Description An issue was discovered in Joomla! where inadequate filtering of form contents could allow the overwrite of the author field.

Recommendations For Joomla! versions 1.6.0 through 3.9.24, update to a version that contains a fix for this issue.

Fix

Related Identifiers

BIT-JOOMLA-2021-26029

CVE-2021-26029

Affected Products

Joomla!

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26029 · Security Note
• https://osv.dev/vulnerability/BIT-joomla-2021-26029 · Vendor Advisory
• https://developer.joomla.org/security-centre/849-20210309-core-inadequate-filtering-of-form-contents-could-allow-to-overwrite-the-author-field.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26029 · Vendor Advisory
• https://t.me/cvenotify/10880 · Telegram Post