Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-76604 EUVD-2026-64320GHSA-fq44-8wg9-5qfj

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2

Published Aug 22, 2026 · Updated Aug 24, 2026 · Assigned by Joomla

Description

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.

Affected products

VendorProductAffectedFixed
fabrikar.com Fabrik extension for Joomla 1.0.0-4.7.1 —

References