Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-105603 EUVD-2026-115358GHSA-5wqr-pww3-c423

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

Published Nov 2, 2026 · Updated Nov 5, 2026 · Assigned by Joomla

Description

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

Affected products

VendorProductAffectedFixed
dj-extensions.com DJ-Classifieds extension for Joomla 1.0-3.11.2 —

References