Vendors / Smart Related Articles Project Smart Related Articles Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Smart Related Articles Project records in CISA KEV No Smart Related Articles Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01235 · Published 2017-04-13 · No fix listed CWE-89
Priority LOW 29
The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00855 · Published 2017-04-13 · No fix listed CWE-79
Priority LOW 25
The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check).
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0072 · Published 2017-04-13 · No fix listed
Open these records in search → All records by CVSS severity
1 0 2 0 0
