An issue exists in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.
harmistechnology je messenger 1.2.2