CVE-2026-35220

Joomla! Core - [20260505] - CSRF in user activation endpoint PUBLISHED

Description (CNA)

Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 6.0.0-6.1.0

CWE-352

CISA-ADP

No English description supplied.

No references supplied.