is_admin of the component Setting Handler. Executing a manipulation of the argument AllowFrontManage can lead to missing authorization.
This vulnerability is handled as CVE-2026-11912. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
Intelligence View
SOCIAL SHARE CARD GENERATOR