Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-48907 2 Joomlacontenteditor.net, Widgetfactorylimited 2 Joomla Content Editor (jce) Extension For Joomla, Jce 2026-06-16 9.8 Critical
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.
CVE-2015-7339 1 Widgetfactorylimited 1 Jce 2024-11-21 8.8 High
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.