Lucene search
+L

18504 matches found

NVD
NVD
added 7 hours ago7 views

CVE-2026-66494

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript...

8.7CVSS
SaveExploits0References1
CVE
CVE
added 7 hours ago15 views

CVE-2026-66914

CVE-2026-66914 concerns the Joomla extension SEBLOD. Affected versions are SEBLOD < 3.30.0, < 4.7.0, and

9.2CVSS5.2AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 7 hours ago4 views

CVE-2026-66914

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD 3.30.0, 4.7.0, 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot...

9.2CVSS5.2AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added 7 hours ago7 views

EUVD-2026-54478

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript...

8.7CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 7 hours ago11 views

CVE-2026-66494 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder editor, the JavaScript...

8.7CVSS
SaveExploits0References1
NVD
NVD
added 11 hours ago6 views

CVE-2026-66493

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS
SaveExploits0References1
NVD
NVD
added 11 hours ago6 views

CVE-2026-66492

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability...

6.1CVSS
SaveExploits0References1
NVD
NVD
added 11 hours ago8 views

CVE-2026-66491

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS
SaveExploits0References1
Cvelist
Cvelist
added 12 hours ago7 views

CVE-2026-66491 Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 12 hours ago3 views

CVE-2026-66491

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS5.4AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added 12 hours ago5 views

EUVD-2026-54412

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...

8.2CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added 12 hours ago14 views

CVE-2026-66491

CVE-2026-66491 affects the Joomla extension phoca.cz Phoca Commander (versions 1.0.0–6.1.3). The issue is an improper limitation of paths in the getSource function, enabling an arbitrary file read. The CVSS v4 metrics indicate a high severity (8.2) with network attack vector, low attack complexit...

8.2CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 12 hours ago7 views

CVE-2026-66492 Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability...

6.1CVSS
SaveExploits0References1
CVE
CVE
added 12 hours ago15 views

CVE-2026-66492

Phoca Commander (Joomla extension by phoca.cz) versions 1.0.0-6.1.3 expose a path traversal vulnerability in the file upload action, caused by improper limitation/validation of upload paths. This results in a path traversal flaw within the module. The connected documents confirm the affected prod...

6.1CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 12 hours ago5 views

EUVD-2026-54411

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability...

6.1CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 12 hours ago13 views

CVE-2026-66493

CVE-2026-66493 affects the Joomla extension Phoca Commander (phoca.cz) versions 1.0.0 through 6.1.3. The issue is a path traversal vulnerability caused by improper limitation of paths for delete, copy, and move actions. The CVSS data indicates NETWORK access with low complexity and high privilege...

6.4CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 12 hours ago7 views

CVE-2026-66493 Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 12 hours ago3 views

CVE-2026-66493

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS5.2AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added 12 hours ago4 views

EUVD-2026-54409

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities...

6.4CVSS5.2AI score
SaveExploits0References1
Nuclei
Nuclei
added 16 hours ago6 views

Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE

iCagenda extension for Joomla contains an unrestricted file upload vulnerability in the file attachment feature, letting attackers upload and execute arbitrary PHP code, exploit requires no special privileges. id: CVE-2026-48939 info: name: Joomla iCagenda 3.9.10 - Unauthenticated Arbitrary File...

10CVSS5.9AI score0.24347EPSS
SaveExploits5References2
Rows per page
Query Builder