MEDIUMCVSS v3.1 6.5Vulnerability
CVE-2026-115451
Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 - Anyone could delete images in the Gallery folders, including images on published articles and modules, without logging in. In ACF 3.1.7 and 3.1.8, users could also see, remove or save each other’s unsaved uploads.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-06T06:16:30.423848+00:00
- Cvss score
- 6.5
- Cvss severity
- MEDIUM
- Retrieved at
- 2026-11-06T06:17:09+00:00
- Score
- 6.5
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-115451
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- First seen by Signal
- 2026-11-05T22:06:44+00:00
- Name
- CVE-2026-115451
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Published at
- 2026-11-05T19:17:09.963
- Last modified
- 2026-11-05T19:17:09.963
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph