What’s Vulnerable › Vulnerabilities

CVE-2017-7627

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-13 · updated 2026-06-17

Description

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check).

Affected products

• Smart Related Articles Project Smart Related Articles: 1.1

References

• https://extensions.joomla.org/extension/smart-related-articles/
• https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f
• https://extensions.joomla.org/extension/smart-related-articles/
• https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f

Get alerted when CVE-2017-7627 or the next vulnerability affects your stack