Joomla JCE: CVSS 10.0 RCE, CISA KEV, Automated Scanning Active

Joomla JCE editor has a CVSS 10.0 bug that lets anyone upload and run PHP on your server. No login needed. CISA added it to KEV. Automated scanning is already hitting 2.5 million Joomla sites. CVE: CV