Read the docs

Jomres

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Jomres records in CISA KEV

No Jomres vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jomres 2 records MEDIUM

Records

3 records

TI-2018-15579 CVE-2018-25354 · GHSA-w384-fv8f-hx76

Joomla Component jomres 9.11.2 Cross-Site Request Forgery

Priority MEDIUM 57

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00132 Published 2026-05-23 No fix listed CWE-352
TI-2013-03434 CVE-2013-3932 · GHSA-343p-p7qv-45r9

SQL injection in Jomres component for Joomla!

Priority MEDIUM 42

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01758 Published 2020-01-02 Fixed in 7.3.1 CWE-89
TI-2013-03433 CVE-2013-3931 · GHSA-rgcq-vvvf-5qcq

Cross-site scripting in Jomres component for Joomla!

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00971 Published 2020-01-02 Fixed in 7.3.1 CWE-79
Open these records in search →