PT-2026-71202

Joomla 6.1.1 contains a path traversal vulnerability in the com joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Attackers can supply malicious ZIP entry names with...