Unrated severityNVD Advisory· Published Jul 20, 2026· Updated Jul 23, 2026
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2
CVE-2026-61424
Description
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
Affected products
1- Range: <3.11.2
Patches
Vulnerability mechanics
References
2- mysites.guru/blog/dj-classifieds-unauthenticated-file-upload/mitrethird-party-advisory
- dj-extensions.com/dj-classifiedsmitreproduct
News mentions
0No linked articles in our index yet.