CVE-2026-35220

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N                                    

Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.

Published Date

May 26, 2026

Last Modified

May 27, 2026

CWE ID

CWE-352

Source

NVD

Vendor

Joomla! Project

Product

Joomla! CMS