CVE-2017-7627

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php there is a missing JEXEC check...

CVE-2017-7627

The CVE-2017-7627 issue concerns the Joomla! extension “Smart related articles” (version 1.1). The root cause is a missing _JEXEC check in dialog.php, which permits direct requests bypassing proper initialization. Affected software is the Smart related articles extension for Joomla!, exposing a p...