← All advisories

High severity8.8NVD Advisory· Published Mar 9, 2020· Updated Jun 17, 2026

CVE-2015-7341

CVE-2015-7341

Description

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Joobi/Jnews
cpe:2.3:a:joobi:jnews:*:*:*:*:*:joomla\!:*:*
Range: <8.5.0
JNews/JNews Joomla Componentdescription
JNews/JNews Joomla Componentllm-create
Range: <8.5.0

Patches

Vulnerability mechanics

References

1

labs.integrity.pt/advisories/cve-2015-7341/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.