What is GHSA-wmcw-j3p9-c62j?

GHSA-wmcw-j3p9-c62j is a security advisory published by GitHub Security Advisories with Medium severity. Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom...

Which CVE IDs does GHSA-wmcw-j3p9-c62j cover?

GHSA-wmcw-j3p9-c62j covers the following CVE IDs: CVE-2026-115451. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wmcw-j3p9-c62j?

GHSA-wmcw-j3p9-c62j has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-wmcw-j3p9-c62jMediumCVSS 6.5

Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom...

Vendor

GitHub Security Advisories

Published

November 5, 2026

Last Modified

November 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-115451 →

📋 Description

Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 - Anyone could delete images in the Gallery folders, including images on published articles and modules, without logging in. In ACF 3.1.7 and 3.1.8, users could also see, remove or save each other’s unsaved uploads.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-115451
https://www.tassos.gr
https://github.com/advisories/GHSA-wmcw-j3p9-c62j