TI-2017-14321 CVE-2017-20257 · GHSA-f3w3-4pxg-f2qcJoomla! Component Quiz Deluxe 3.7.4 SQL InjectionPriority HIGH 77Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2026-06-19 · No fix listed CWE-89