References https://www.thesmartscanner.com/vulnerability-list/joomla-component-nextgen-editor-2-1-0-plname-sqli https://sploitus.com/exploit?id=PACKETSTORM:145490 https://www.exploit-db.com/exploits/43245 https://github.com/0xdsm/juumla/issues/1 https://extensions.joomla.org/index.php?option=com_vel&format=json
Related VulnerabilitiesPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCCVE-2026-65761: Joomla Easy Store - SQL InjectionPoCCVE-2026-57827: RSFiles! for Joomla - Arbitrary File UploadPoCCVE-2026-48030: Pheditor 2.0.1-2.0.3 - OS Command InjectionPoCCVE-2026-48939: Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCEPoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File InclusionPoCCVE-2026-48907: Joomla! JCE extension < 2.9.99.5 unauthenticated RCEJoomla JCE /index.php com_jce 文件上传漏洞(CVE-2026-48907)tianti /tianti-module-admin/ueditor/controller.jsp 服务器端请求伪造漏洞PoClimesurvey-open-redirect: LimeSurvey - Open Redirect via editorLinkDoraCMS /api/v1/upload/ueditor 服务器端请求伪造漏洞(CVE-2026-25870)PoCjoe-deadjoe-file-exposure: Joe Editor DEADJOE File - Exposure