TI-2019-15798 CVE-2019-25748 · GHSA-qmfj-p8rg-x779Joomla JHotelReservation 6.0.7 SQL Injection via search-hotelsPriority HIGH 77Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2026-06-19 · No fix listed CWE-89