Joomla! Component Easy Shop version 1.2.3 contains a local file inclusion flaw that allows unauthenticated attackers to read arbitrary files on the server by sending a crafted GET request to index.php. The attacker supplies a base64‑encoded file path in the file parameter while setting option=com_easyshop and task=ajax.loadImage. This enables reading of sensitive files such as the Joomla configuration file and system files, exposing credentials and other confidential data. The vulnerability is a classic example of CWE‑98 and can lead to full disclosure of confidential data.

The affected product is Easy Shop by Joomtech, version 1.2.3. No other versions are specifically listed. The component is deployed on Joomla! websites that have installed this exact version of Easy Shop.

The CVSS score of 6.9 indicates moderate severity. The EPSS score is not available, so the exact likelihood of exploitation is unknown, but the flaw can be triggered by unauthenticated web requests, making it a highly likely target. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit it from any machine that can reach the website, sending a standard HTTP GET request; hence the attack vector is network‑based and requires no special privileges.