Joomla! CMS Local File Inclusion Vulnerability

Vulnerability

A local file inclusion vulnerability has been identified in Joomla! CMS versions 3.2.1 through 5.4.5 and 6.0.0 through 6.1.0. This vulnerability arises from improper validation of user-supplied input, allowing for the inclusion of local files.

Impact

Exploitation of this vulnerability allows for local file inclusion, which could lead to unauthorized access to sensitive files on the server.

Remediation

Users are advised to upgrade to Joomla! CMS version 5.4.6 or 6.1.1.

Added: May 26, 2026, 11:16 PM
Updated: May 26, 2026, 11:16 PM

Vulnerability Rating

Custom Algorithm
spread
7.6
impact
0.6
exploitability
6.8
remediation
7.7
relevance
9.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.