VYPR
← All advisories
High severityNVD Advisory· Published Sep 27, 2026

CVE-2026-97164

CVE-2026-97164

Description

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension < 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.