Description
An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 4.0.0 | — |
Unscored
CVE-2021-26040
EUVD-2021-12863GHSA-qfrh-p934-938f
[20210801] - Core - Insufficient access control for com_media deletion endpoint
Published Aug 24, 2021 · Updated Feb 25, 2026 · Assigned by Joomla