All security reports
NVD security advisoryCritical

Critical advisory for Joomla Extension - dj-extensions

CVE-2026-105603 · Reported 2 Nov 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Joomla Extension - dj-extensionsAffected product

Advisory overview

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account