high8.8
CVE-2026-48958
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
Impact
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 4.0.0 before 5.4.7 from 6.0.0 before 6.1.2 |