An improper access check allows unauthorized access to com_config webservice endpoints.

An improper access check allows privilege escalation through the com_users batch task.

An improper access check allows privilege escalation through the com_users batch task.

An improper access check allows privelege escalation through the com_users group editing webservice endpoint.

An improper access check allows unauthorized access to webservice endpoints.

The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers.

Improper Access Controls allows access to protected views.

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Improper Access Controls allows backend users to overwrite their username when disallowed.