Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS Score
9.4
EPSS Score
0.013
Published
2026-09-26
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS Score
9.2
EPSS Score
0.004
Published
2026-09-26
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS Score
8.3
EPSS Score
0.003
Published
2026-09-26
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVSS Score
10.0
EPSS Score
0.004
Published
2026-09-26