An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups.
We have discovered 125,590 live websites that are affected by CVE-2020-11889.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 125,590 live websites (97% of Joomla install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 78 versions ( 60% of all versions) |
| 7,182 websites | |
| 32,194 websites | |
| 13,330 websites | |
| 7,241 websites | |
| 6,533 websites | |
| 5,210 websites | |
| 4,681 websites | |
| 4,625 websites | |
| 3,881 websites | |
| 3,603 websites |
| .com | 27,521 websites |
| .it | 21,488 websites |
| .ru | 11,015 websites |
| .de | 3,676 websites |
| .nl | 3,616 websites |
| .org | 3,090 websites |
| .se | 2,982 websites |
| .co.uk | 2,717 websites |
| .net | 2,475 websites |
| .cz | 2,249 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****************.de | *,*** | ||
| *******.**.ca | *,*** | ||
| *****.com | **,*** | ||
| ***********.com | **,*** | ||
| ***********.**.za | **,*** | ||
| ***************.com | **,*** | ||
| *********.kz | **,*** | ||
| *********.com | **,*** | ||
| ************.com | **,*** | ||
| ************.com | **,*** |