Vulnerabilities

TI-2026-46932 CVE-2026-65891 · GHSA-chfv-whhw-v522

Improper input validation in joomlacontenteditor.net Joomla Content Editor extension for…

LOW 29

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00336 Published 2026-07-29 No fix listed CWE-20

TI-2026-36167 CVE-2026-48907 · GHSA-c3f5-4g7f-qjqj

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

CRITICAL 100KEV

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.85439 Published 2026-06-05 No fix listed CWE-284

TI-2015-06103 CVE-2015-7339 · GHSA-gmf4-rxmx-v3cp

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file…

MEDIUM 40

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01127 Published 2020-03-09 No fix listed CWE-434

Vulnerabilities

Filters

Improper input validation in joomlacontenteditor.net Joomla Content Editor extension for…

Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file…