CVE-2026-48907 | BDVDB-2026-338301 Detail
joomlacontenteditor.netJoomla Content Editor (JCE) extension for Joomla
Description#
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.
Impact#
CAPEC-242: Code Injection
Weaknesses#
- CWE-284 Improper Access Control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.