Threats tagged 'ghsa-fgrv-mjcr-vg2p'

CVE-2026-90915 is a path traversal vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.8 and 6.0.0 through 6.1.3. It allows improper validation of cache group names during cache purge actions, enabling arbitrary directory deletions. The vulnerability has a high severity rating with a CVSS 4.0 score of 7. No known exploits are reported in the wild. Joomla! CMS is not a cloud service, and no patch information is provided in the source data.