CVE-2026-118494

A flaw was found in JReviews. The extension stores cached configuration settings, including system secrets and third-party application programming interface API keys, in a web-accessible directory without proper access controls. An unauthenticated remote attacker who determines the cache file pat...