The Joomla Content Editor (JCE) versions before 2.20.2 are affected by a vulnerability that allows authenticated users with file management permissions to create hidden files and unintentionally overwrite existing files due to improper input validation in the file rename functionality. This issue can lead to unintended file overwrites and potential security risks. The vulnerability was addressed in JCE ve [truncated]
Known exploitedjoomlacontenteditor.netCVE published 2026-06-16
CVE-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability debrief. The vulnerability is critical with a CVSS score of 10. Users should assess exposure and apply vendor-provided security updates and patches. The vulnerability affects Joomla Content Editor users and administrators. Verify and apply vendor-provided security updates and patches. Ensure compliance with CISA’s BO [truncated]
