Arbitrary file upload in Dj-Extensions.com Jdownloads Extension For Joomla

CVE-2026-61900

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.

Vulnerability class: Unrestricted File Upload

EPSS: 0.004 (37.2th percentile) — read the EPSS interpretation.