It could’ve left the site open for an attacker to read or alter data they shouldn’t have access to. “It was just a glaring ...
CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results