Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Jomres Clear all filters
TI-2018-15579 CVE-2018-25354 · GHSA-w384-fv8f-hx76

Joomla Component jomres 9.11.2 Cross-Site Request Forgery

Priority MEDIUM 57

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00132 Published 2026-05-23 No fix listed CWE-352
TI-2013-03434 CVE-2013-3932 · GHSA-343p-p7qv-45r9

SQL injection in Jomres component for Joomla!

Priority MEDIUM 42

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01758 Published 2020-01-02 Fixed in 7.3.1 CWE-89
TI-2013-03433 CVE-2013-3931 · GHSA-rgcq-vvvf-5qcq

Cross-site scripting in Jomres component for Joomla!

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web script or HTML via t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00971 Published 2020-01-02 Fixed in 7.3.1 CWE-79