TF Content for Joomla vulnerabilities

2 known vulnerabilities in TF Content for Joomla from Joomlafry.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  TF Content for Joomla: Missing Authorization

  CVE-2026-102779Oct 5, 2026Joomlafry.com

  Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task `records.custom_action` without authentication, ACL, CSRF, task-trigger, content-binding, or cro

• 9.8 Critical severity

  TF Content for Joomla: Missing Authorization

  CVE-2026-102780Oct 5, 2026Joomlafry.com

  Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordController`. Its shared frontend save controll