← CVE Intelligence

CVE-2026-73373

Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 PUBLISHED

Description (CNA)

Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.

Affected (CNA)

Vendor / productVersions
Joomla! Project / Joomla! CMSaffected 1.0.0-5.4.6; affected 6.0.0-6.1.2
Joomla! Project / Joomla! Framework Filesystem packageaffected 1.0.0-3.3.0; affected 4.0.0-4.2.0

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.