Medium severity5.3NVD Advisory· Published Apr 21, 2020· Updated Jun 17, 2026

CVE-2020-11891

Description

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/Joomla!2 versions
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=3.8.8,<3.9.17
- (no CPE)range: <3.9.17
Joomla!/Joomla!description
osv-coords
pkg:bitnami/joomla
Range: >= 3.8.8, < 3.9.17

Patches

Vulnerability mechanics

References

developer.joomla.org/security-centre/809-20200401-core-incorrect-access-control-in-com-users-access-level-editing-function.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000