CVE-2021-26031

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate filters on module layout settings could lead to an LFI.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
joomlajoomla\!
3.0.0 ≤
𝑥
≤ 3.9.25
𝑥
= Vulnerable software versions
References
https://developer.joomla.org/security-centre/851-20210402-core-inadequate-filters-on-module-layout-settings.html
https://developer.joomla.org/security-centre/851-20210402-core-inadequate-filters-on-module-layout-settings.html