CVE-2019-17399: Joomlashack Shack Forms Pro

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.

Affected products

• Joomlashack Shack Forms Pro: before 4.0.32 (fixed in 4.0.32)

Published 2019-10-09. Last modified 2026-06-17.