https://patchfirst.co/vendor/joomla/New and newly exploited Joomla! CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2023-23752/CVE-2023-23752#kevMon, 08 Jan 2024 00:00:00 GMTJoomla! · Joomla!. In CISA KEV since 2024-01-08. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 66.7 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2011-4908/CVE-2011-4908Wed, 12 Feb 2020 00:00:00 GMTJoomla! · TinyBrowser Plugin. Not in CISA KEV. EPSS 55.8% (higher than 99.04% of CVEs). Public exploit code exists. Priority 24.8 of 100.public-exploit