Threats affecting pkg:composer/getk2.com/k2

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-48941getk2.org K2 extension for Joomla · Missing Authorisation Medium6.5EPSS 0.3%2026-06-25CVE Database V5CVE-2026-48941 The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parameter and uses it directly to address a `JFolder::delete()` call under `/media/k2/galleries/` EPSS 0.3%Vulnerability CWE-862	CVE Database V5	2026-06-25

Page 1 of 1