Medium severityNVD Advisory· Published Nov 12, 2026
CVE-2026-117542
CVE-2026-117542
Description
Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8 - A manipulated update_file form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <4.1.8
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.