Remote Code Execution in Joomla Extension by php-web-design.com
CVE-2026-105600

8.6HIGH

Key Information:

Vendor

PHP-web-design.com

Status
Stageit Extension For Joomla
Vendor
CVE Published:
2 November 2026

What is CVE-2026-105600?

The Joomla extension StageIt from php-web-design.com is vulnerable to remote code execution due to improper handling of setting strings in versions 1.0-5.7.5 and 6.0-6.3.5. This flaw permits attackers to execute arbitrary code on affected systems, potentially compromising the integrity and security of the environment. Users of this extension should apply the necessary patches and updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

StageIt extension for Joomla 1.0-5.7.5

StageIt extension for Joomla 6.0-6.3.5

References

https://www.php-web-design.com/Information/stageit-6-chan...
product

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.