Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Primary rating from Vendor (Joomla) · only source for this CVE.
CVSS VectorVendor: Joomla
Lifecycle Timeline
4DescriptionCVE.org
Modals gallery paths could enumerate unintended directories.
AnalysisAI
Directory enumeration via path traversal in the Modals Pro extension for Joomla 1.0.0–15.0.0 allows unauthenticated remote attackers to list unintended directories. Successful exploitation may expose directory structures and potentially manipulate gallery paths, though only low confidentiality and integrity impacts are reported. EPSS indicates a 0.20% exploitation probability, and no active exploitation or public exploit code is known.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-47898
GHSA-qxgr-83r6-wx59