Threats tagged 'ghsa-r4qw-4gcx-m59m'

An unauthenticated arbitrary file upload vulnerability exists in Joomla Extension Custom Tables versions prior to 3.7.8. Attackers can upload files with attacker-controlled extensions to a web-accessible temporary directory via a public submission form. The uploaded files are served as static content, enabling hosting of malicious content such as phishing or malware pages under the victim's domain.