Description

Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available (such as those with TeX Live installed).

Remediation

References

CVE-2025-26525

Related Vulnerabilities

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.14)

PleskLin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22608)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2535)

WordPress Plugin WordPress Comment Rating Cross-Site Scripting (1.5.3)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-552 CVE-2025-26525