TI-2018-15422 CVE-2018-25197 · GHSA-wm3j-hx7p-jg7qPlayJoom 0.10.1 SQL Injection via catid ParameterPriority HIGH 77PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0027 · Published 2026-03-06 · No fix listed CWE-89