← CVE Intelligence

CVE-2026-48907

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 PUBLISHED

Description (CNA)

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

Affected (CNA)

Vendor / productVersions
joomlacontenteditor.net / Joomla Content Editor (JCE) extension for Joomlaaffected 1.0.0-2.9.99.4

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.