CVE-2026-61424: Dj-Extensions.com Dj-Classifieds Extension For Joomla

Critical severity, CVSS 10.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.

Affected products

• Dj-Extensions.com Dj-Classifieds Extension For Joomla: version 1.0-3.11.1 only

Published 2026-07-20. Last modified 2026-07-23.