CVE-2015-7341: Joobi Jnews

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.

Affected products

• Joobi Jnews: before 8.5.0 (fixed in 8.5.0)

Published 2020-03-09. Last modified 2026-06-17.