Advisories · Technology

dj-extensions.com DJ-Classifieds extension for Joomla.

Every CVE that names dj-extensions.com DJ-Classifieds extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105605 CVE record

CVSS 5.3 Medium

Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3
- dj-extensions.com DJ-Classifieds extension for Joomla
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-105604 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3
- dj-extensions.com DJ-Classifieds extension for Joomla
- SQL injection
Not analysed yet 2 Nov 2026
CVE-2026-105603 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3
- dj-extensions.com DJ-Classifieds extension for Joomla
- Unrestricted file upload
Not analysed yet 2 Nov 2026
CVE-2026-61424 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2
- dj-extensions.com DJ-Classifieds extension for Joomla
- Unrestricted file upload
Not analysed yet 20 Jul 2026