Vulnerabilities

TI-2026-83813 CVE-2026-103420 · GHSA-8fmx-38vw-6672

Cross-site request forgery in StageIt extension for Joomla

LOW 31

Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5

CVSS 4.0HIGH 7.2 Network No auth User interaction EPSS 0.00204 Published 2026-11-02 No fix listed CWE-352

TI-2026-83808 CVE-2026-105600 · GHSA-fr8m-34f8-rxf3

LOW 39

Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00392 Published 2026-11-02 No fix listed CWE-94

TI-2026-83809 CVE-2026-105601 · GHSA-4c3p-6g38-cj58

LOW 24

Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00403 Published 2026-11-02 No fix listed CWE-79