A reflected XSS vulnerability exists in the StageIt extension for Joomla, versions 1.0-5.7.5 and 6.0-6.3.5. This vulnerability, tracked as CVE-2026-105601, has a CVSS score of 5.3 and is considered medium severity. Defenders responsible for Joomla installations with the StageIt extension should assess exposure and prioritize patching or mitigation efforts. The vulnerability allows attackers to inject mali [truncated]
CVE-2026-105600 is a high-severity Remote Code Execution (RCE) vulnerability in the Joomla Extension - php-web-design.com - StageIt 1.0-5.7.5, 6.0-6.3.5. This vulnerability allows attackers to execute arbitrary code on affected systems, potentially leading to significant operational impact. Joomla administrators and security teams should assess exposure and prioritize verification for installations using [truncated]
