Seblod Extension For Joomla
Monthly
Arbitrary file disclosure in the SEBLOD content construction kit (CCK) extension for Joomla lets unauthenticated remote attackers read files both inside and outside the webroot via directory traversal, affecting versions before 3.30.0, before 4.7.0, and before 6.0.1. Reported by the Joomla project (EUVD-2026-54480) and rated CVSS 4.0 9.2, the flaw requires no authentication or user interaction and can expose configuration files, credentials, and secrets. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary file disclosure in the SEBLOD content construction kit (CCK) extension for Joomla lets unauthenticated remote attackers read files both inside and outside the webroot via directory traversal, affecting versions before 3.30.0, before 4.7.0, and before 6.0.1. Reported by the Joomla project (EUVD-2026-54480) and rated CVSS 4.0 9.2, the flaw requires no authentication or user interaction and can expose configuration files, credentials, and secrets. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.