https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:44:16 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-102780 <p>Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordController`. Its shared frontend save controller accepts the raw `jform` array, assigns the request-selected existing record ID, and saves it without filtering submitted properties through the configured form. A Guest can obtain a valid token from Joomla&#39;s public login form and modify any TF Content row, including mass-assigning `published`, `access`, and `created_by`.</p> <p>Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordController`. Its shared frontend save controller accepts the raw `jform` array, assigns the request-selected existing record ID, and saves it without filtering submitted properties through the configured form. A Guest can obtain a valid token from Joomla&#39;s public login form and modify any TF Content row, including mass-assigning `published`, `access`, and `created_by`.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-102780 https://vulnerability.circl.lu/vuln/ghsa-5q6m-pwqm-wmc9 <p>Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordController`. Its shared frontend save controller accepts the raw `jform` array, assigns the request-selected existing record ID, and saves it without filtering submitted properties through the configured form. A Guest can obtain a valid token from Joomla&#39;s public login form and modify any TF Content row, including mass-assigning `published`, `access`, and `created_by`.</p> <p>Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public `RecordController`. Its shared frontend save controller accepts the raw `jform` array, assigns the request-selected existing record ID, and saves it without filtering submitted properties through the configured form. A Guest can obtain a valid token from Joomla&#39;s public login form and modify any TF Content row, including mass-assigning `published`, `access`, and `created_by`.</p> https://vulnerability.circl.lu/vuln/ghsa-5q6m-pwqm-wmc9