CVE-2026-48907

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Jce

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

5. Jun 2026

Ausgewertete Quellen

• Hersteller
  https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48907
• CISA
  Widget Factory Joomla Content Editor Improper Access Control Vulnerability
• NVD
  CVE-2026-48907