CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension check, no content check, and no filename sanitisation of any kind. An authenticated core.manage user could upload a .php file disguised with an image Content-Type header and execute it directly by requesting the resulting path.
| CWE | CWE-434 |
| Vendor | ordasoft.com |
| Product | ordasoft joomla gallery free extension for joomla |
| Published | Sep 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for ordasoft.com ordasoft joomla gallery free extension for joomla
Be the first to know when new unknown vulnerabilities affecting ordasoft.com ordasoft joomla gallery free extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
OrdaSoft.com / OrdaSoft Joomla Gallery free extension for Joomla
1.0.0-6.2.6
OrdaSoft.com / OrdaSoft Joomla Gallery extension for Joomla
1.0.0-6.2.6
Credits
Ala Arfaoui