Skip to content
OpenAdvisories

Vendor

joomlacontenteditor.net

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65891 Public exploit

    Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10

    Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with fil…

  • Critical 10.0
    CVE-2026-48907 Exploited Public exploit Scanner template EPSS 85%

    Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

    A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

    KEV Jun 16, 2026