Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: tabaoca.org Clear all filters
TI-2026-47580 CVE-2026-67284 · GHSA-mcj5-vx8j-3qrg

Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2

Priority LOW 24

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissi…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-12 No fix listed CWE-284
TI-2026-47579 CVE-2026-67283 · GHSA-x9hv-www7-w846

Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2

Priority LOW 37

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permis…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00419 Published 2026-08-12 No fix listed CWE-284