<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: dj-extensions.com DJ-Classifieds extension for Joomla</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/dj-extensions-com-dj-classifieds-extension-for-joomla.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-105603: Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds &lt; 3.11.3</title><link>https://vulnfeed.org/cve/CVE-2026-105603/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-105603/</guid><pubDate>Mon, 02 Nov 2026 19:17:49 +0000</pubDate><description>Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds &lt; 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.</description></item><item><title>CVE-2026-105604: Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds &lt; 3.11.3</title><link>https://vulnfeed.org/cve/CVE-2026-105604/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-105604/</guid><pubDate>Mon, 02 Nov 2026 18:27:14 +0000</pubDate><description>Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds &lt; 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.</description></item></channel></rss>
