HighCVSS 7.5
EPSS 36.8%
Public exploit
Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter.