- Affected Application: Joomla! CMS (versions 3.0.0 through 3.9.24)
- CVE Identifier: CVE-2021-26032
- CVSS Impact Score: 7.5 (High)
Impact & Description:
Unsafe path handling within the Media Manager component allowed unauthorized users to rename and overwrite critical files, which could lead to remote code execution (RCE).
Action Required:
Clients running affected Joomla! versions should upgrade to Joomla 3.9.25 or later as soon as possible.