The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
[POC] GHSA-3whf-vgf2-9w6g — CVE-2026-61424
DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds < 3.11.2
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.