high8.8
CVE-2015-7339
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.p…
Impact
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Widgetfactorylimited | Jce | from 2.5.0 through 2.5.2 |