Paper/Archive/CVE-2026-117551

CVE-2026-117551

jdownloads.com jDownloads extension for Joomla — Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8

CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8 - Insufficient validation of frontend thumbnail uploads allowed users with upload permission to place executable files on the server. This results in PHP code execution.

Affected

ProductAffectedFixed inSource

jDownloads extension for Joomla1.0.0-4.1.7–CNA

Scores by source

Joomla (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y

References

refjdownloads.com