CVE-2026-118494
HIGH
MEDIUM
Priority: 0.04
BB Relevance:
76/100
Published: 2026-11-05
Modified: 2026-11-12
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
AT:
Present
VC:
High
VI:
None
VA:
None
Description
Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 - JReviews caches its full settings table, including the Joomla global configuration secret (copied into cms_secret) and third-party API keys and secrets, to a serialized file under components/com_s2framework/tmp/cache/core/ inside the web root. The file has no PHP guard and the directory has no .htaccess, so anyone who knows the file name can read it without authentication.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| jreviews.com | JReviews component for Joomla | 6.0.0-6.6.9 |
| jreviews.com | JReviews component for Joomla | 1.0.0-5.12.0 |
| jreviews.com | JReviews component for Joomla | 6.0.0-6.6.9 |
| jreviews.com | JReviews component for Joomla | 1.0.0-5.12.0 |
| jreviews.com | JReviews component for Joomla | 6.0.0-6.6.9 |
| jreviews.com | JReviews component for Joomla | 1.0.0-5.12.0 |
| jreviews.com | JReviews component for Joomla | 6.0.0-6.6.9 |
| jreviews.com | JReviews component for Joomla | 1.0.0-5.12.0 |
References & Advisories (1)
product