https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-9030.htmlhttps://patchthecve.com/cve/CVE-2017-9030.htmlWed, 17 Jun 2026 01:27:21 +0000HIGH 7.5: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.https://patchthecve.com/cve/CVE-2017-5215.htmlhttps://patchthecve.com/cve/CVE-2017-5215.htmlWed, 17 Jun 2026 01:20:10 +0000CRITICAL 9.8: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.https://patchthecve.com/cve/CVE-2017-5214.htmlhttps://patchthecve.com/cve/CVE-2017-5214.htmlWed, 17 Jun 2026 01:20:10 +0000HIGH 7.5: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.