Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Joomlatag records in CISA KEVNo Joomlatag vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 59
Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.36823 · Published 2018-01-29 · No fix listed CWE-200
Open these records in search →