VULNERABILITY INTELLIGENCE
CVE-2025-22213
EPSS probability0.49%
CISA KEVNot currently listed
Published2025-03-11
Last modified2026-06-17
Description
Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions.
Weakness classification
- security@joomla.org: CWE-434