The Joomla Content Editor (JCE) by Widget Factory is a popular extension for Joomla CMS. Versions 1.0.0 through 2.9.99.4 contain a critical improper access control vulnerability (CVE-2026-48907) allowing unauthenticated PHP code execution.
The Joomla Content Editor (JCE) by Widget Factory is a popular extension for Joomla CMS. Versions 1.0.0 through 2.9.99.4 contain a critical improper access control vulnerability (CVE-2026-48907) allowing unauthenticated PHP code execution.