high7.3
CVE-2026-21629
The ajax component was excluded from the default logged-in-user check in the administrative area.
Impact
The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 3.0.0 before 5.4.4 from 6.0.0 before 6.0.4 |