CVE-2026-48907

The CVE pertains to the Joomla JCE (joomlacontenteditor) extension. Affected component: JCE editor extension for Joomla. Vulnerability: unauthenticated creation of new editor profiles enabling PHP code upload and remote code execution. Root cause: improper authorization/validation in the editor p...

CVE-2026-48907 Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

PT-2026-46908

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...