A maximum-severity vulnerability in the Widget Factory Joomla Content Editor plugin is being actively exploited. CISA has mandated that U.S. federal agencies apply patches by Friday. The flaw affects systems using this widely-deployed content management component.

Why it matters in Western Canada: Canadian public sector, post-secondary, and healthcare organizations using Joomla and the JCE plugin face the same exploitation risk as U.S. federal systems. Active exploitation means Western Canadian institutions should prioritize patching to prevent compromise.

---

Summary generated from the original advisory. Read the full source: bleepingcomputer