PoC Archive
home
pocs
archive
GitHub
home
pocs
archive
tag
Arbitrary-File-Delete
Critical
Joomla Novarain Framework (nrframework) Unauthenticated Arbitrary File Inclusion — CVE-2026-21627
CVE-2026-21627
·
plg_system_nrframework (Tassos/Novarain Framework) Joomla plugin, bundled with Convert Forms, Engage Box, Google Structured Data, and other Tassos.gr extensions
patched
web
2026-07-05