CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

CISA has added a critical vulnerability, CVE-2026-48907, to its Known Exploited Vulnerabilities catalog affecting the Widget Factory Joomla Content Editor (JCE) due to improper access control. This flaw allows for PHP co…