// CVE · PUBLISHED 2026-09-26
CVE-2026-97160
lomart.fr / UP plugin for Joomla
9.4 · CVSS 4.0Critical
Description
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.