Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://developer.joomla.org/security-centre/1077-20260810-core-unrestricted-uploads-of-shtml-files.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.9 · joomlaNVD modified 2026-10-22 22:10
Affected (CPE criteria) 1
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*