k2_extension_for_joomla vulnerabilities

CVEs whose affected-version data names the k2_extension_for_joomla package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48943Medium· 6.5

4mo ago

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin `plg_user_k2`. A Registered Joomla user, by including the field `K2UserForm=1` in a standard `com_users` `profile.save` POST, can write arbitrary values into the `n…

▾ Sunlitgetk2.org · K2 extension for JoomlaEPSS 0.30%via NVD