Joomla publishes information about modules they are aware of are vulnerable, this list is updated monthly and a good resource to check from time to time to see if you are using any of the vulnerable modules. You will find the vulnerable extensions list here.

