CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.
No wealth tax bill is pending, but commissions said the hearing provided valuable feedback on what constituents want from their leaders in local government.