https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:56:46.516543+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-48942 CVE-2026-48942 — Joomla Extension - getk2.org - Stored-XSS in K2 extension for Joomla < 2.26 2026-10-08T21:56:46.517708+00:00

Affected: getk2.org K2 extension for Joomla

K2 ≤ 2.26 renders the `#__k2_users.image` column directly into HTML `src` attributes via two distinct templates, in both cases without HTML escaping.