For eight years, hackers have been able to exploit this password-stealing flaw in Joomla
For the last eight years a critical vulnerability has lurked within the code of the Joomla CMS which could have allowed malicious hackers to steal every user’s login credentials – including those belonging to administrators.
Read more in my article on the Hot for Security blog.