TI-2019-15804 CVE-2019-25754 · GHSA-8wqw-62gh-h3xjJoomla vRestaurant 1.9.4 SQL Injection via menu-listing-layoutPriority HIGH 77Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keysearch parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2026-06-19 · No fix listed CWE-89