Joomlafry.com vulnerabilities
We track 2 vulnerabilities in Joomlafry.com products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 5, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Joomlafry.com vulnerabilities
- 7.3 High severity
TF Content for Joomla: Missing Authorization
Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task `records.custom_action` without authentication, ACL, CSRF, task-trigger, content-binding, or cro
- 9.8 Critical severity
TF Content for Joomla: Missing Authorization
Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordController`. Its shared frontend save controll