Threats tagged 'ghsa-55p7-x368-5pg2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.2	CVE-2026-118494Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - High8.22026-11-05GCVE DatabaseCVE-2026-118494 JReviews, a Joomla extension, caches its full settings table including sensitive data such as the Joomla global configuration secret and third-party API keys in a serialized file located in a web-accessible directory. This file lacks PHP guards and the directory lacks .htaccess protection, allowing unauthenticated users who know the file name to read it. The vulnerability affects versions 1.0.0 through 5.12.0 and 6.0.0 through 6.6.9 of JReviews. Report on CVE-2026-118494 Vulnerability CWE-538 #ghsa-55p7-x368-5pg2	GCVE Database	2026-11-05

Page 1 of 1