Approved changes feed: RSS · Atom

cpe:2.3:a:joomlacontenteditor.net:joomla_content_editor_(jce)_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoomlacontenteditor.Net (9c86b063-0b10-5bd3-a950-b6522122d7ce)
ProductJoomla Content Editor (Jce) Extension For Joomla (5209dfe6-d371-5482-b7aa-6b6b262abdf4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65891 vulnerable 2026-09-16 04:33:07.029219 Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files to otherwise invalid names, resulting in the creation of hidden files. The issue also allowed existing files at the destination path to be unintentionally replaced.
Published: 2026-07-29T12:37:47.658Z
Updated: 2026-07-31T05:43:27.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48907 vulnerable 2026-06-08 08:05:12.360337 Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.
Published: 2026-06-05T07:31:30.257Z
Updated: 2026-06-20T11:56:48.886Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.