High severity7.5NVD Advisory· Published Sep 26, 2026· Updated Oct 20, 2026
CVE-2026-97161
CVE-2026-97161
Description
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Affected products
2- Range: 5.0.0-5.2.0, 6.0.0-6.0.29
Patches
Vulnerability mechanics
References
1- up.lomart.frnvdProduct
News mentions
2- Joomla Extensions: Batch of 13 Vulnerabilities Includes Critical RCE, SQLi, and XSSVypr Intelligence · Sep 28, 2026
- Joomla Extensions: Four Critical RCE, SQLi, and Path Traversal Flaws Disclosed TogetherVypr Intelligence · Sep 26, 2026