CVE-2021-26027: Joomla!

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Incorrect ACL checks could allow unauthorized change of the category for an article.

Affected products

• Joomla! Joomla!: from 3.0.0, before 3.9.25 (fixed in 3.9.25)

Published 2021-03-04. Last modified 2026-06-17.