TI-2017-14320 CVE-2017-20256 · GHSA-j2v7-3257-5fx2Joomla Survey Force Deluxe 3.2.4 SQL Injection via invite ParameterPriority MEDIUM 45Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2026-06-19 · No fix listed CWE-89