JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

Published Mar 9, 2020 · Updated Aug 6, 2024 · Assigned by mitre