Skip to content
OpenAdvisories
High · 7.1 CVE-2026-117550 EUVD-2026-124603GHSA-c83x-5hv5-99wm

Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by Joomla

Description

Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads < 4.1.8 - Manipulated frontend submission parameters could bypass the intended publication and ownership rules. In particular, submissions could be published despite automatic publication being disabled, and ownership could be assigned contrary to the intended policy.

Affected products

VendorProductAffectedFixed
jdownloads.com jDownloads extension for Joomla 1.0.0-4.1.7 —

References