| Package | Affected versions | Patched versions |
|---|---|---|
| joomla content editor | = 2.0≤ 2.0.21 |
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor (JCE) component before 2.1 for Joomla!, when chunking is set to greater than zero, allows remote authors to execute arbitrary PHP code by uploading a PHP file with a double extension as demonstrated by .jpg.pht.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free