Oh look, Joomla extensions are broken.

Security firm mySites.guru found active zero-day exploitation in Joomla's Balbooa Forms and iCagenda extensions, letting unauthenticated characters run code on our servers because why not. This lovely surprise of file upload flaws means administrators running these popular add-ons get the joy of scanning directories for dodgy PHP files. If we want to desperately cling to safety, we must run to apply the newly released updates before our systems completely roll over. It is just another exhausting Tuesday of chasing fires we did not start.