The Joomdle component for Joomla includes a default configuration that allows read access to CMS user accounts and the ability to reset their passwords. This flaw falls under insecure default settings and information exposure. An attacker who can reach the extension’s configuration can view user credentials and change passwords, enabling impersonation and further compromise of site integrity.

The vulnerability affects the Joomdle extension for Joomla, versions earlier than 3.1.1. Users of these versions with the default settings are at risk; no other products are listed.

The CVSS score of 7.5 indicates high severity, but the EPSS score of less than 1% suggests low likelihood of widespread exploitation at this time. The flaw is not listed in the CISA KEV catalog. Attackers would likely exploit the web interface or configuration files of the extension, and may need only minimal or no prior authentication to reset passwords or read account data. This attack vector and authentication assumption are inferred from the description. The combination of a high severity rating and low exploitation probability places the risk in a moderate to high category for affected installations.