Расширение: ProFiles

Критическая CVSS 10.0

CVE-2026-48907

РасширениеJCE

Разработчикjoomlacontenteditor

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

05.06.2026 Требует внимания

Высокая CVSS 7.0

CVE-2025-54296

РасширениеProFiles

Разработчикmooj

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.

23.07.2025

Средняя CVSS 4.8

CVE-2018-18276

РасширениеProfiles Project Profiles

Разработчикcinquino.eu

XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel.

26.04.2019