Websites using the Joomla CMS have been under sustained attack thanks to a nasty pair of vulnerabilities disclosed last week