CVE-2026-66914

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 PUBLISHED

Description (CNA)

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.

Affected (CNA)

Vendor / product	Versions
seblod.com / SEBLOD extension for Joomla	affected 1.0.0-3.29.0; affected 4.0.0-4.6.0; affected 5.0.0-6.0.0

CWE

CWE-22

References

https://www.seblod.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.