Arbitrary file upload in Dj-extensions.com Jdownloads Extension For Joomla

CVE-2026-61900

The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.

Vulnerability class: Unrestricted File Upload