Joomplace

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Joomplace records in CISA KEV

No Joomplace vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Com Joomportfolio 1 record LOW Quiz Deluxe 1 record HIGH Survey Force Deluxe 1 record MEDIUM

Records

3 records

TI-2017-14321 CVE-2017-20257 · GHSA-f3w3-4pxg-f2qc

Joomla! Component Quiz Deluxe 3.7.4 SQL Injection

HIGH 77

Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00413 Published 2026-06-19 No fix listed CWE-89

TI-2017-14320 CVE-2017-20256 · GHSA-j2v7-3257-5fx2

Joomla Survey Force Deluxe 3.2.4 SQL Injection via invite Parameter

MEDIUM 45

Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00492 Published 2026-06-19 No fix listed CWE-89

TI-2009-04191 CVE-2009-4428 · GHSA-mm28-g35c-6p9x

SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for…

LOW 35

SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the secid parameter in a showcat action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01024 Published 2009-12-28 No fix listed CWE-89

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0