CVE-2026-105603 — Vulnerability intelligence

dj-extensions.com — DJ-Classifieds extension for Joomla

Published: 2026-11-02T18:25:29.193Z

CVSS

9.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

Sources

• CVE-2026-105603
• Original advisory
• CVE-2026-105603