medium4.3
CVE-2026-35220
Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.
Impact
Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 6.0.0 before 6.1.1 |