CVE-2026-97161

Summary

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Affected Software

VendorProductVersion RangeStatus
lomart.frUP plugin for Joomla5.0.0-5.2.0affected
lomart.frUP plugin for Joomla6.0.0-6.0.29affected

Weaknesses

  • CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory
  • CWE-284: CWE-284 Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References