CVE-2026-97162

The UP plugin extension for Joomla versions 5.0.0 to 5.2.0 and 6.0.0 to 6.0.29 is vulnerable to multiple SQL injection vectors, allowing attackers to execute arbitrary SQL queries on the database. This could lead to unauthorized data access, data manipulation, or complete system compromise. Joomla site administrators using affected versions should prioritize patching or upgrading to mitigate the risk of exploitation.