When installing a content management system for your website, it's easy to get lazy and assume that it's going to do all the work for you. A CMS like Joomla certainly does make things more convenient, and lets you publish a polished website very quickly, but that doesn't mean you shouldn't take some extra time to secure it.
This is a companion discussion topic for the original entry at https://linuxconfig.org/use-joomscan-to-scan-joomla-for-vulnerabilities-on-kali