CVE-2019-12764: Joomla!

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.

Affected products

• Joomla! Joomla!: from 3.8.13, before 3.9.7 (fixed in 3.9.7)

Published 2019-06-11. Last modified 2026-06-17.