VYPR

miniOrange OAuth Client

by Miniorange.com

CVEs (1)

  • CVE-2026-77995CriAug 24, 2026
    risk 0.65cvss epss

    Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.