Description

An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.

Remediation

References

CVE-2021-26033

Related Vulnerabilities

WordPress Plugin Smart Reporter for WooCommerce and WP eCommerce Multiple Unspecified Vulnerabilities (2.9.2)

Oracle Database Server CVE-2015-4863 Vulnerability (CVE-2015-4863)

WordPress Plugin Data Tables Generator by Supsystic Cross-Site Scripting (1.10.0)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.14)

qdPM Sensitive Information Disclosure Vulnerability (CVE-2015-3882)

Severity

Medium

Classification

CVE-2021-26033 CWE-352

Tags

Missing Update Known Vulnerabilities