CVE-2026-40384

Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint PUBLISHED

Description (CNA)

An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.0.0-5.4.5; affected 6.0.0-6.1.0

CWE-22

CISA-ADP

No English description supplied.

No references supplied.