What’s Vulnerable › Vulnerabilities

CVE-2015-7339

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-09 · updated 2026-06-17
• Weakness: CWE-434

Description

JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.

Affected products

• joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla: from 2.5.0 through 2.5.2

References

• https://labs.integrity.pt/advisories/cve-2015-7339/
• https://labs.integrity.pt/advisories/cve-2015-7339/

Get alerted when CVE-2015-7339 or the next vulnerability affects your stack