TI-2017-14318 CVE-2017-20254 · GHSA-fc5c-m7wj-hqjwJoomla! Component User Bench 1.0 SQL Injection via useridPriority HIGH 77Joomla! Component User Bench 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the userid parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2026-06-19 · No fix listed CWE-89