CyberRota Analysis
AI-GeneratedThe Joomla extension from joomshaper.com is vulnerable due to missing access controls in the Gallery Image Management feature, allowing unauthorized users to perform file removal actions and upload unverified file types. This could lead to potential data loss or exploitation of the system through malicious file uploads. Organizations using SP Property versions prior to 4.1.4 should prioritize patching this vulnerability to mitigate associated risks.
Original NVD Description
Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 - The gallery management controller tasks lacked authorization checks and CSRF token validation.. Users could invoke file removal actions with arbitrary path strings or upload unverified file types.