TI-2017-14325 CVE-2017-20261 · GHSA-3r7g-gjfg-fgprJoomla! Component Bargain Product VM3 1.0 SQL InjectionPriority HIGH 77Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the product_id parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2026-06-19 · No fix listed CWE-89