TI-2019-15811 CVE-2019-25761 · GHSA-2vm9-r326-x68cJoomla! Component JoomCRM 1.1.1 SQL Injection via deal_idPriority MEDIUM 64Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00405 · Published 2026-06-19 · No fix listed CWE-89