Threats tagged 'ghsa-j6fq-w4r3-5q3g'

1 threat

Threats tagged 'ghsa-j6fq-w4r3-5q3g'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-90907Joomla! CMS · Authorization Bypass Through User-Controlled Key Medium6.9EPSS 0.2%2026-09-29CVE Database V5CVE-2026-90907 A vulnerability in Joomla! CMS versions 1.5.0 through 5.4.8 and 6.0.0 through 6.1.3 allows unauthorized creation of guest-level user accounts via the profile.save controller. This occurs because the controller does not verify the login state of the user, enabling account creation on sites without active user registration. EPSS 0.2%Vulnerability Joomla! Project #cwe-639 #ghsa-j6fq-w4r3-5q3g	CVE Database V5	2026-09-29

Showing 1–1 of 1 result