View::_getElementFileName of the component PHP File Handler. Executing a manipulation can lead to improper control of filename for include/require statement in php program ('php remote file inclusion').This vulnerability appears as CVE-2026-48820. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf vuldb.com.
SOCIAL SHARE CARD GENERATOR