Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Joomplace Clear all filters
TI-2017-14321 CVE-2017-20257 · GHSA-f3w3-4pxg-f2qc

Joomla! Component Quiz Deluxe 3.7.4 SQL Injection

Priority HIGH 77

Joomla! Component Quiz Deluxe 3.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands through the ajaxaction.flag_question task.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00413 Published 2026-06-19 No fix listed CWE-89
TI-2017-14320 CVE-2017-20256 · GHSA-j2v7-3257-5fx2

Joomla Survey Force Deluxe 3.2.4 SQL Injection via invite Parameter

Priority MEDIUM 45

Joomla Survey Force Deluxe 3.2.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the invite parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00492 Published 2026-06-19 No fix listed CWE-89