Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
lomart.fr records in CISA KEVNo lomart.fr vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00466 · Published 2026-09-26 · No fix listed CWE-22
Priority MEDIUM 46
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00422 · Published 2026-09-26 · No fix listed CWE-22
Priority MEDIUM 45
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS 4.0CRITICAL 9.4· Network · High privileges · No interaction · EPSS 0.0131 · Published 2026-09-26 · No fix listed CWE-94
Priority LOW 36
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00328 · Published 2026-09-26 · No fix listed CWE-89
Open these records in search →