Dj-extensions.com vulnerabilities
We track 5 vulnerabilities in Dj-extensions.com products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest Dj-extensions.com vulnerabilities
- 9.3 Critical severity
DJ-Classifieds extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.
- 9.4 Critical severity
DJ-Classifieds extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.
- 8.7 High severity
DJ-HelpfulArticles extension for Joomla: Improper Neutralization of Input During Web Page Generation
Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, getDenyReason in mod_djhelpful_articles/h
- 10.0 Critical severity
DJ-Classifieds extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
- 8.5 High severity
DJ-Classifieds component for Joomla: Improper Neutralization of Special Elements used in an SQL Command
A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.