EIP-2026-108707

This is a technical writeup detailing an arbitrary file upload vulnerability in JE Messenger 1.0, a Joomla component. The vulnerability arises due to improper sanitization and a logic error in the upload function, allowing authenticated users to upload malicious PHP files.