Vulnerabilidades do Joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla: 2 registro(s), com versões afetadas e correções.
CVE-2026-65891
Média · 6.5
CWE-20 29/07/2026
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.
CVE-2026-48907
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-284 05/06/2026
Widget Factory Joomla Content Editor Improper Access Control Vulnerability
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.