TI-2019-15807 CVE-2019-25757 · GHSA-jhcc-2422-9h5xJoomla vWishlist 1.0.1 SQL Injection via vproductid ParameterPriority MEDIUM 64Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vproductid and userid parameters.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00405 · Published 2026-06-19 · No fix listed CWE-89