All packages
RO CSVI vulnerabilities
3 known CVE vulnerabilities in RO CSVI, translated and rated.
- CVE-2026-65946Medium
Joomla Extension - rolandd.com - contains XSS vectors in AJAX endpoint handlers in RO CSVI before version 9.11.0.
- CVE-2026-65944High
CSRF vulnerability in the Joomla extension RO CSVI versions prior to 9.11.0. CSRF vectors exist in AJAX endpoint handlers, potentially allowing an attacker to perform unauthorized actions in the context of an administrator's session.
- CVE-2026-65943High
Joomla extension RO CSVI (rolandd.com) before version 9.11.0 allows unauthenticated attackers to create directories on the server.