Threats tagged 'ghsa-xmqq-fcm3-vh28'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.2%	CVE-2026-100750Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro High8.5EPSS 0.2%2026-09-28GCVE DatabaseCVE-2026-100750 A vulnerability in the Joomla extension Modules Anywhere (versions 1.5.0 through 9.0.5) allows local file inclusion (LFI) and server-side request forgery (SSRF) via the module tag's additional attributes. These attributes can override arbitrary parameters of the selected module without author verification. The Joomla core Feed module is specifically affected through its rssurl parameter, which accepts local file and network URLs. EPSS 0.2%Report on CVE-2026-100750 Vulnerability CWE-918 #ghsa-xmqq-fcm3-vh28	GCVE Database	2026-09-28

Page 1 of 1