Advanced Custom Fields extension for Joomla — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in Advanced Custom Fields extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: tassos.gr

CVE ID	Title	CVSS	Severity	Published
CVE-2026-115451	Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 CWE-284	6.9	Medium	2026-11-05
CVE-2026-115452	Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6 CWE-79	7.5	High	2026-11-05

All 2 known CVE vulnerabilities affecting Advanced Custom Fields extension for Joomla with full Chinese analysis, references, and POCs where available.