Skip to content
OpenAdvisories

Product · regularlabs.com

Sourcerer extension for Joomla

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0

    Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0

    Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where th…

  • Critical 9.8

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaS…