CVE-2026-78079: Joomla Unvalidated Base64 Redirectcve-2026-78079-joomla-unvalidated-base64-redirect
Base64-decoded input is passed directly to a redirect method without verifying that the target URL is an internal destination, which can lead to an open redirect vulnerability (CWE-601).