CVE-2026-118494

The JReviews Joomla extension (versions 1.0.0-5.12.0 and 6.0.0-6.6.9 ) is vulnerable to unauthorized information disclosure. The component caches its full settings table—including third-party API keys , secrets, and the Joomla global configuration secret —to a serialized file located at component...

EUVD-2026-117630

Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - JReviews caches its full settings table, including the Joomla global configuration secret copied into cmssecret and third-party API keys and secrets, to a serialized file under...

CVE-2026-118494 Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9

Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - JReviews caches its full settings table, including the Joomla global configuration secret copied into cmssecret and third-party API keys and secrets, to a serialized file under...