← All advisories

Critical severity9.8NVD Advisory· Published Oct 9, 2019· Updated Jun 17, 2026

CVE-2019-17399

CVE-2019-17399

Description

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

Affected products

4

Joomla/Shack Formsllm-create
Range: <4.0.32
Joomla/Shack Forms Prollm-create
Range: <4.0.32
Joomla!/Shack Forms Prodescription
JoomlaShack/Shack Forms Pro
cpe:2.3:a:joomlashack:shack_forms_pro:*:*:*:*:*:joomla\!:*:*
Range: <4.0.32

Patches

Vulnerability mechanics

References

1

www.joomlashack.com/changelog/shack-forms/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.