Joomlashack

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Joomlashack records in CISA KEV

No Joomlashack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Shack Forms Pro · all components

TI-2019-12994 CVE-2019-17399 · GHSA-g688-fqj8-mmw7

MEDIUM 45

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01701 Published 2019-10-09 No fix listed CWE-22