galan-gr.com

Results Summary

30 findings detected across galan-gr.com.

17 components identified. WordPress detected: No.

Severity Breakdown

Total findings detected across all components. The public summary below groups findings by vulnerability type. To see every affected component in full detail, run a free scan on your own domain at vulnify.app/tools.

Findings Overview

30 unique issues shown below, grouped from 30 total findings. When a vulnerability affects multiple components, it is listed once with the affected component count.

• high Multiple high-value Joomla public surfaces responded during validation

  Observed 4 high-value Joomla surfaces responding across API, administrator, installation, and manifest endpoints. That creates a much richer reconnaissance picture than a homepage-only scan would show.

• high Strict-Transport-Security (HSTS): missing

  Ensures the browser only connects over HTTPS

• high Content-Security-Policy (CSP): missing

  Prevents XSS and data injection attacks

• high Content-Security-Policy header missing

  No CSP header detected. XSS impact surface is larger.

• high Cookie missing Secure flag

  [REDACTED]: [REDACTED]=[REDACTED]; path=/; HttpOnly

• medium Joomla extension and template footprint detected

  Detected 17 Joomla core, component, module, plugin, or template signal(s) from public assets and sampled routes.

• medium Joomla administrator manifest responded publicly

  Observed /administrator/manifests/files/joomla.xml with status 200 | version 4.2.9.

• medium X-XSS-Protection: missing

  Legacy XSS protection (modern browsers use CSP)

• medium [REDACTED]: missing

  Restricts Adobe Flash and PDF policies

• medium Cookie missing SameSite attribute

  [REDACTED]: [REDACTED]=[REDACTED]; path=/; HttpOnly

• medium Different start URLs resolve to different final destinations

  https://galan-gr.com/ | http://galan-gr.com/ | https://www.galan-gr.com/

• medium Disclosure headers or generator metadata expose stack details

  Generator: Helix Ultimate - The Most Popular Joomla! Template Framework., Server: Apache

• medium Technology fingerprint signals were detected across the public surface

  Generator Meta on /, /shop/product-page, /shop/category-layout, /blog/blog-list, /blog/blog-grid | Joomla on /, /shop/product-page, /shop/category-layout, /blog/blog-list, /blog/blog-grid | Bootstrap on /, /shop/product-page, /shop/category-layout, /…

• low Version-confirmed Joomla component evidence was collected

  Confirmed version clues for 1 Joomla component signal(s) from public assets, generator hints, or manifest data. This is stronger than component-only visibility because it helps drive patch decisions immediately.

• low Joomla core version clue was exposed publicly

  Observed Joomla version evidence: 374. Public core-version clues can accelerate exploit-path selection for attackers tracking Joomla advisories.

• low Public Joomla API surface responded during validation

  Observed /api/index.php/v1 responding with status 403. Review whether this public API exposure is intentional and aligned with your access design.

• low Joomla administrator entry point is publicly reachable

  Observed /administrator/ responding with status 301. Public reachability is common, but high-value admin paths should still be protected by stronger controls and monitoring.

• info Joomla footprint signals detected

  Joomla signal count: 6 | core version clue: 374. Confirm the target is a live Joomla frontend URL.

• info Broader Joomla route coverage completed

  Sampled 7 frontend route(s) plus bounded public Joomla surfaces for deeper evidence.

• info Additional Joomla components were identified beyond the initial homepage response

  Homepage component signals: 16; comprehensive component signals: 17.

What the Joomla Stack Check Covers

This security profile for galan-gr.com was generated by Vulnify. The check analyzes:

• Joomla core version and vulnerability lookup
• Extension inventory and security assessment
• Template and component identification
• Security headers and configuration checks
• Exposed configuration and sensitive file checks

Prioritized Actions

• highAdd Content-Security-Policy (CSP) header
• highAdd Strict-Transport-Security (HSTS) header
• highAdd baseline CSP
• highHarden cookies
• mediumReduce public Joomla core-version disclosure
• mediumReview public access to Joomla manifest artifacts
• mediumReview Joomla API exposure and access design
• mediumUse hardened cookie prefixes where possible
• mediumStandardize canonical redirect destination
• mediumReduce disclosure headers
• lowMinimize unnecessary version or generator disclosure

About This Check

This report was generated using Vulnify's free security tools. Results reflect the configuration at the time of the check. For ongoing monitoring, detailed remediation guidance, and vulnerability scanning across 50+ security tests, create a free Vulnify account.

Last checked: August 25, 2026