TI-2017-14344 CVE-2017-20280 · GHSA-53wm-r5wv-4rc3Joomla Component Myportfolio 3.0.2 SQL Injection via pid ParameterPriority HIGH 77Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pid parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00432 · Published 2026-06-19 · No fix listed CWE-89