Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority HIGH 77

Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00658 Published 2026-06-19 No fix listed CWE-359
Priority MEDIUM 64

Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00405 Published 2026-06-19 No fix listed CWE-89
Priority HIGH 77

Joomla Component JoomRecipe 1.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the category parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00432 Published 2026-06-19 No fix listed CWE-89