The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.
The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact(default (no data)) | 55.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 55.00 |
VPI formula vpi-v1