← Database

CVE-2026-48940

LOW CVSS: 3.4 Published: 2026-06-25 Modified: 2026-06-28

Description

A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field contains a raw `