CVE Catalog
CVE-2026-64872
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.22%
13th percentile - higher than 13% of all known CVEs
Summary
The Cache Cleaner Pro extension for Joomla! allows path traversal outside the web root via custom purge and log paths.
Risk Assessment
An attacker can read or delete files outside the web root, potentially leading to data leakage or system damage.
Recommendation
Update the Cache Cleaner Pro extension and restrict paths to the web root directory.
Other vulnerabilities in Joomla Extension - Cache Cleaner Pro
Original NVD description (English source)
Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory.