Improper input validation in joomlacontenteditor.net Joomla Content Editor extension for…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| joomlacontenteditor.net | Joomla Content Editor (JCE) extension for Joomla | 1.0.0-2.9.99.9 | — | No fix listed | CNA |
- Joomla Content Editor (JCE) extension for Joomla Vendorjoomlacontenteditor.net Affected 1.0.0-2.9.99.9 Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:core:joomla\!:*:* | before 2.20.2 | Vulnerable | Widgetfactorylimited |
| cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:pro:joomla\!:*:* | before 2.20.2 | Vulnerable | Widgetfactorylimited |
- cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:core:joomla\!:*:* Versions before 2.20.2 Vulnerable ·Widgetfactorylimited
- cpe:2.3:a:widgetfactorylimited:jce:*:*:*:*:pro:joomla\!:*:* Versions before 2.20.2 Vulnerable ·Widgetfactorylimited
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2026-65891
- 2026-10-03 Alias added: GHSA-chfv-whhw-v522
References
More Widgetfactorylimited Jce vulnerabilities
- TI-2026-36167 Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 KEVCVSS 4.0CRITICAL 10.0
- TI-2015-06103 JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file… CVSS 3.1HIGH 8.8
Sources
- CVE-2026-65891 · CVE Program
- CVE-2026-65891 · NVD
- FIRST EPSS
- GHSA-chfv-whhw-v522 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences