title: [20230101] - Core - CSRF within post-installation messages
description: An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messages.
problem types: CSRF
affected:
{
defaultStatus: unaffected
product: Joomla! CMS
vendor: Joomla! Project
versions:
status: affected, version: 4.0.0-4.2.6
}