CVE-2026-61900 | dj-extensions JDownloads Plugin up to 4.1.5 File Upload unrestricted upload

July 20, 2026 Yanac

A vulnerability was found in dj-extensions JDownloads Plugin up to 4.1.5. It has been declared as critical. This issue affects some unknown processing of the component File Upload Handler. The manipulation results in unrestricted upload.

This vulnerability is identified as CVE-2026-61900. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More