No Code Attached Yet
avatar anatamambo
anatamambo
20 Aug 2026

[redacted]

Votes

# of Users Experiencing Issue
1/1
Average Importance Score
5.00

avatar anatamambo anatamambo - open - 20 Aug 2026
avatar anatamambo anatamambo - change - 20 Aug 2026
Labels Removed: ?
avatar joomla-cms-bot joomla-cms-bot - change - 20 Aug 2026
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 20 Aug 2026
avatar alikon
alikon - comment - 20 Aug 2026

If you thinks is a vulnerability, please report it to the JSST first. You can contact the team via email at security@joomla.org or using the contact form

avatar anatamambo
anatamambo - comment - 20 Aug 2026

Thank you for the advice, i've reported as advised


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48279.

avatar anatamambo
anatamambo - comment - 20 Aug 2026

Thank you for the advice, i've reported as advised


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/48279.

avatar alikon alikon - change - 20 Aug 2026
The description was changed
avatar alikon alikon - change - 20 Aug 2026
The description was changed
Status New Closed
Closed_Date 0000-00-00 00:00:00 2026-08-20 10:11:12
Closed_By alikon
avatar alikon alikon - close - 20 Aug 2026
avatar SniperSister
SniperSister - comment - 20 Aug 2026

This is not a core Joomla issue, the attack exploits an issue in Sourcerer that was patched a couple of days ago.

avatar SniperSister SniperSister - change - 20 Aug 2026
Title
Zero Day Vulnerability that downloads web shell in my joomla site directory
Extension security issue -Zero Day Vulnerability that downloads web shell in my joomla site directory
avatar SniperSister SniperSister - edited - 20 Aug 2026
avatar SniperSister SniperSister - change - 20 Aug 2026
Title
Extension security issue -Zero Day Vulnerability that downloads web shell in my joomla site directory
[unrelated report, 3rd party security issue]
avatar SniperSister SniperSister - edited - 20 Aug 2026
avatar SniperSister SniperSister - change - 20 Aug 2026
The description was changed
avatar SniperSister SniperSister - edited - 20 Aug 2026

Add a Comment

Login with GitHub to post a comment