CVE-2019-17399

CRITICAL 9.8CVE-2019-17399 · Published 09/10/2019 · updated 17/06/2026

In short

CVE-2019-17399 is a CRITICAL (CVSS 9.8) vulnerability affecting shack forms pro (joomlashack).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.3% of all vulnerabilities.
Fix: update to 4.0.32 or later.

Package	Affected versions	Patched versions
shack forms pro joomlashack	`< 4.0.32`	`4.0.32`

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.