Read the docs

Extro

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Extro records in CISA KEV

No Extro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Responsive Portfolio 1 record HIGH

Records

3 records

TI-2017-14322 CVE-2017-20258 · GHSA-cm4j-r3hw-w37m

Joomla! Component RPC Responsive Portfolio 1.6.1 SQL Injection

Priority HIGH 77

Joomla! Component RPC Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00413 Published 2026-06-19 No fix listed CWE-89
TI-2018-15606 CVE-2018-25381 · GHSA-hrjv-472v-7gw8

Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters

Priority MEDIUM 64

Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00284 Published 2026-05-25 No fix listed CWE-89
TI-2018-15605 CVE-2018-25380 · GHSA-q672-h346-9rqq

Joomla Component eXtroForms 2.1.5 SQL Injection via filter parameters

Priority MEDIUM 64

Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type_id, filter_pid_id, and filter_search parameters.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00284 Published 2026-05-25 No fix listed CWE-89
Open these records in search →