Threats tagged 'ghsa-jjxj-h5w2-gpmh'

A path traversal vulnerability exists in the SP Property extension for Joomla versions 1.0.0 through 4.1.3. The flaw is due to improper limitation of a pathname to a restricted directory in the gallery image management controller, which lacks directory confinement checks. This vulnerability was assigned CVE-2026-78085 and has a medium severity rating with a CVSS 4.0 score of 6.9.