TI-2019-15799 CVE-2019-25749 · GHSA-625w-9wpc-g966Joomla J-CruisePortal 6.0.4 SQL Injection via cruisesPriority MEDIUM 64Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the guest_adult parameter.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00405 · Published 2026-06-19 · No fix listed CWE-89