CVE-2026-105603

Description

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-105603 ↗
• dj-extensions.com/dj-classifieds ↗

Related CVEs

• CVE-2026-102435themefic / Ultra Addons for Contact Form 7CVSS 9.8
• CVE-2026-105606joomlaboat.com / Custom Tables extension for JoomlaCVSS 9.5
• CVE-2026-105604dj-extensions.com / DJ-Classifieds extension for JoomlaCVSS 9.3
• CVE-2026-119085AWS / virtual-engineering-workbenchCVSS 9.4
• CVE-2026-88811SUSE / RancherCVSS 9.1
• CVE-2026-105769chainguard / kanikoCVSS 9.3
• CVE-2026-61900dj-extensions.com / jDownloads extension for JoomlaCVSS 10.0
• CVE-2026-61424dj-extensions.com / DJ-Classifieds extension for JoomlaCVSS 10.0