NVD Description

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Public Exploits & PoCs1 found

[POC] CVE-2026-97160 — CVE-2026-97160

CVE-2026-97160 PoC for Joomla UP (lomart.fr): privileged {up php=} shortcode eval code injection in versions 5.0.0–5.2.0 and 6.0.0–6.0.29 (fix 5.2.1 / 6.1.0). Detects plugin version and verifies public article execution.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free