CVE Catalog
CVE-2026-73372
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk0.29%
22th percentile - higher than 22% of all known CVEs
Summary
Joomla! Core has an improper ACL check when injecting schema.org contact data. This allows contact information for inaccessible contact items to be injected into schema.org snippets.
Risk Assessment
The organization may expose contact data that should be inaccessible, potentially violating privacy or confidentiality.
Recommendation
Update Joomla! to a version where the ACL check is fixed, as recommended by the vendor.
Original NVD description (English source)
Joomla! Core - [20260809] - Improper ACL checks when injection schema.org contact data in Joomla 5.1.0-5.4.7 and 6.0.0-6.1.2 - An improper access check injects contact information for unaccessible contact items into schema.org snippets.