Skip to main content

Modals Pro Extension For Joomla EUVDEUVD-2026-47898

| CVE-2026-65713 MEDIUM
Path Traversal (CWE-22)
2026-07-23 Joomla GHSA-qxgr-83r6-wx59
6.5
CVSS 3.1 · Vendor: Joomla
Share

Severity by source

Vendor (Joomla) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

4
Analysis Generated
Jul 26, 2026 - 12:23 vuln.today
CVSS changed
Jul 24, 2026 - 20:22 NVD
6.5 (MEDIUM)
CVE Published
Jul 23, 2026 - 09:15 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 23, 2026 - 09:15 cve.org
MEDIUM 6.5

DescriptionCVE.org

Modals gallery paths could enumerate unintended directories.

AnalysisAI

Directory enumeration via path traversal in the Modals Pro extension for Joomla 1.0.0–15.0.0 allows unauthenticated remote attackers to list unintended directories. Successful exploitation may expose directory structures and potentially manipulate gallery paths, though only low confidentiality and integrity impacts are reported. EPSS indicates a 0.20% exploitation probability, and no active exploitation or public exploit code is known.

Share

EUVD-2026-47898 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy