TI-2019-15800 CVE-2019-25750 · GHSA-v8jc-3fg2-vvgcJoomla J-MultipleHotelReservation 6.0.7 SQL InjectionPriority HIGH 77Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hotel_id parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2026-06-19 · No fix listed CWE-89