CVE-2026-97162: lomart up

CVSS 9.8 (critical) · published 2026-09-26

Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Affected products (NVD): lomart up

Weakness: CWE-89

Source: NVD CVE-2026-97162

References

• https://up.lomart.fr/

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.