Skip to content
OpenAdvisories

Vendor

getk2.org

7 known vulnerabilities.

Products

K2 extension for Joomla 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.4
    CVE-2026-48940

    Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26

    A Joomla user with K2 "create item" rights (Author tier by default) can submit an article whose `embedVideo` POST field contains a raw `<script>` tag; K2 stores it verbatim and renders it unescaped to any visitor of the article page.

    getk2.org K2 extension for Joomla Web / CMS