High severity7.5NVD Advisory· Published Dec 16, 2016· Updated Jun 17, 2026
CVE-2016-9838
CVE-2016-9838
Description
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of registration form data stored to the session on a validation error enables a user to gain access to a registered user's account and reset the user's group mappings, username, and password, as demonstrated by submitting a form that targets the registration.register task.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- www.joomla.org/announcements/release-news/5693-joomla-3-6-5-released.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/94893nvdThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/41157/nvd
News mentions
0No linked articles in our index yet.