CVE-2023-23750: Joomla!

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messages.

Affected products

• Joomla! Joomla!: from 4.0.0, up to and including 4.2.6

Published 2023-02-01. Last modified 2026-06-17.