Sourcerer extension for Joomla vulnerabilities
4 known vulnerabilities in Sourcerer extension for Joomla from Regularlabs.com. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 10.0 Critical severity
Sourcerer extension for Joomla: Improper Control of Generation of Code
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where tha
- 9.8 Critical severity
Sourcerer extension for Joomla: Improper Access Control
Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaSc
- 7.5 High severity
Articles Anywhere extension for Joomla: Use of Cache Containing Sensitive Information
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted o
- 8.0 High severity
Advanced Module Manager extension for Joomla: Improper Access Control
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions