CVE-2026-61900 — Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6

CVE-2026-61900

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 PUBLISHED

Description (CNA)

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.

Affected (CNA)

Vendor / product	Versions
dj-extensions.com / jDownloads extension for Joomla	affected 4.1.0-4.1.5

CWE

CWE-434

References

https://www.jdownloads.com/
https://mysites.guru/blog/jdownloads-4-1-unauthenticated-upload-flaw/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.