Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-67283 EUVD-2026-57152GHSA-x9hv-www7-w846

Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2

Published Aug 12, 2026 · Updated Aug 12, 2026 · Assigned by Joomla

Description

Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every file managed within the extension.

Affected products

VendorProductAffectedFixed
tabaoca.org Cotton Cloud extension for Joomla 1.0.0-2.0.1 —

References