CVE-2026-61424

The DJ-Classifieds Joomla extension prior to version 3.11.2 is susceptible to unauthenticated arbitrary file uploads, which can be exploited to achieve full remote code execution (RCE). This vulnerability poses a significant risk to any Joomla installations using the affected extension, allowing attackers to execute malicious code on the server. Organizations utilizing DJ-Classifieds should prioritize immediate updates to mitigate potential exploitation.