Information Disclosure in Joomla Tagged Items Listings

Joomla's Tags component and the Popular Tags and Similar Tags modules checked each tagged item's own access level but ignored the access level of its category, so an item left Public inside a Registered- or Special-only category was listed (title, alias, text excerpt) to visitors who are not allowed to view that category. Any unauthenticated... Weiterlesen: Information Disclosure in Joomla Tagged Items Listings