Extensiondeveloper

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Extensiondeveloper records in CISA KEV

No Extensiondeveloper vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2018-12378 CVE-2018-17377 · GHSA-f9ff-x8mf-55mx

MEDIUM 48

SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03213 Published 2018-09-28 No fix listed CWE-89