Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Joomlaextensions Clear all filters
TI-2018-15658 CVE-2018-25433 · GHSA-pc8q-9h4v-qfcf

Joomla JE Photo Gallery 1.1 SQL Injection via categoryid

Priority HIGH 77

Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00341 Published 2026-06-01 No fix listed CWE-89
TI-2018-15562 CVE-2018-25337 · GHSA-cpjv-mhxq-9xqf

Joomla JoomOCShop 1.0 Cross-Site Request Forgery

Priority MEDIUM 57

Joomla JoomOCShop 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00164 Published 2026-05-17 No fix listed CWE-352
TI-2018-15555 CVE-2018-25330 · GHSA-8g35-6gf9-rwcg

Joomla! EkRishta 2.10 Persistent XSS and SQL Injection

Priority HIGH 77

Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code through profile fields and POST parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-05-17 No fix listed CWE-89
TI-2011-04137 CVE-2011-4809 · GHSA-wx6q-qwhg-8vv2

Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity)…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) language[], (2) univer…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01494 Published 2011-12-14 No fix listed CWE-79