CVE-2026-97160

CVE-2026-97160 — UP Plugin PHP Code Injection Joomla Python 3 PoC for CVE-2026-97160 — UP Universal Plugin for Joomla lomart.fr / up.lomart.fr. Description PoCbit / GitHub CVE-2026-97160 — UP plugin 5.0.0–5.2.0 and 6.0.0–6.0.29 allow PHP code injection through up php=... shortcodes processed with...