K2

K2 for Joomla! Mass-Assignment Vulnerability (CVE-2026-48943) — Medium Severity

Overview K2, a popular content extension for Joomla!, has been found to have a security flaw. This vulnerability, known as a mass-assignment defect, could allow a registered Joomla user to secretly modify certain fields in their K2 user profile that…

Alex Joseph
June 26, 2026

K2 for Joomla! Cross-Site Scripting Vulnerability (CVE-2026-48940) — Low Severity

A new security concern has been identified in K2, a popular content extension for Joomla!. This vulnerability, tracked as CVE-2026-48940, highlights a potential risk where malicious scripts could be injected into articles. While rated as “Low” severity, it’s important for…

Alex Joseph
June 26, 2026