Andrés Restrepo

**Name of the Vulnerable Software and Affected Versions** JDownloads versions prior to 4.1.6 **Description** The Joomla extension JDownloads contains a flaw that allows an unauthenticated user to perform an arbitrary file upload. This can lead to full Remote Code Execution (RCE), which is the ability of an attacker to execute arbitrary commands on the host machine over a network. **Recommendations** Update JDownloads to version 4.1.6 or later.