TI-2019-15806 CVE-2019-25756 · GHSA-wv3x-66pg-w5xwJoomla! Component vAccount 2.0.2 SQL Injection via vaccount-dashboardPriority HIGH 77Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vid parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00453 · Published 2026-06-19 · No fix listed CWE-89