jreviews.com vulnerabilities and threats

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.5%	CVE-2026-118494JReviews component for Joomla · Insertion of Sensitive Information into Externally-Accessible File or Directory in High8.2EPSS 0.5%2026-11-05CVE Database V5CVE-2026-118494 JReviews component for Joomla versions 1.0.0 through 5.12.0 and 6.0.0 through 6.6.9 caches sensitive configuration data, including Joomla global secrets and third-party API keys, in a serialized file within a web-accessible directory. This file lacks PHP guards and the directory lacks .htaccess protection, allowing unauthenticated attackers who know the file name to read sensitive information. EPSS 0.5%Vulnerability jreviews.com CWE-538	CVE Database V5	2026-11-05

Page 1 of 1