Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-76603 EUVD-2026-64328GHSA-cv96-j94j-5mwq

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2

Published Aug 22, 2026 · Updated Aug 25, 2026 · Assigned by Joomla

Description

Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.

Affected products

VendorProductAffectedFixed
fabrikar.com Fabrik extension for Joomla 1.0.0-4.7.1 —

References