Authenticated File Upload Vulnerability in DJ-Classifieds by DJ Extensions
CVE-2026-105603

9.4CRITICAL

Key Information:

Vendor

Dj-extensions.com

Status
Dj-classifieds Extension For Joomla
Vendor
CVE Published:
2 November 2026

What is CVE-2026-105603?

The DJ-Classifieds extension for Joomla has been found to have a vulnerability that allows authenticated users to upload arbitrary files. This flaw can be exploited by malicious actors to potentially execute remote code, leading to severe security issues and compromising the integrity of the Joomla installation. It is crucial for users of this extension to update to version 3.11.3 or later to mitigate these risks.

Affected Version(s)

DJ-Classifieds extension for Joomla 1.0-3.11.2

References

https://dj-extensions.com/dj-classifieds
product

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ala Arfaoui
.