A critical vulnerability in the Sourcerer extension for Joomla allows unauthenticated remote attackers to execute arbitrary code, posing a severe risk of full system compromise.

This vulnerability involves multiple code injection vectors stemming from improper access control. The extension fails to enforce mandatory Super User privileges for PHP execution and inconsistently applies security configurations for CSS, JavaScript, and PHP, permitting unauthorized script execution and directory traversal.

Successful exploitation allows an unauthenticated attacker to execute arbitrary PHP code on the underlying server. This level of access typically results in complete system takeover, unauthorized data exfiltration, and potential lateral movement within the hosting environment. Given the CVSS score of 9.8, this is a critical threat that requires immediate remediation to prevent catastrophic impact.

Immediate Action: Update the Sourcerer extension for Joomla to the latest available version provided by regularlabs.com.

Proactive Monitoring: Review web server and Joomla application logs for suspicious requests containing PHP syntax or unexpected file path references.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block malicious PHP injection patterns and unauthorized access attempts to the Joomla extensions directory.

Public Exploit Available: No

This vulnerability represents a critical security failure that could lead to full site compromise. Administrators should verify their current installation version immediately and apply the vendor patch. If an update cannot be performed instantly, disable the Sourcerer extension to eliminate the attack surface until the environment is secured.