Verot Project Verot vulnerabilities

• joomlaworks k2, verot project verot +1 more class.upload.php in verot.net omits .pht from the set of dangerous file extensions CVE-2019-19634 Public exploit 9.8 CriticalDecember 17, 2019
• joomlaworks k2, verot project verot +1 more Remote code execution in verot/class.upload.php CVE-2019-19576 Public exploitFix available EPSS 26.4% 9.8 CriticalDecember 4, 2019