TI-2017-14345 CVE-2017-20281 · GHSA-78h7-96vm-7f8gJoomla! Component Extra Search 2.2.8 SQL InjectionPriority HIGH 77Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00476 · Published 2026-06-19 · No fix listed CWE-89