DJ-Extensions.com jDownloads extension for Joomla vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting DJ-Extensions.com jDownloads extension for Joomla: 1 record(s), with affected versions and fixes.
CVE-2026-61900
Critical · 10.0
CWE-434 Jul 20, 2026
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.