Path Traversal in Seblod.com Seblod Extension For Joomla
CVE-2026-66914
Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could download files from both inside and outside the webroot.
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Seblod.com Seblod Extension For Joomla — versions 1.0.0-3.29.0, 4.0.0-4.6.0, 5.0.0-6.0.0
Weakness classification (CWE)
References
- security@joomla.org (product)