Vulnerabilities

TI-2023-30634 CVE-2023-54361 · GHSA-xmgp-65vp-rxq2

Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword

LOW 29

Joomla iProperty Real Estate 4.1.1 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the filter_keyword parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00234 Published 2026-04-09 No fix listed CWE-79

TI-2018-04392 CVE-2018-6024 · GHSA-r94p-6gm5-6xxg

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

MEDIUM 48

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2018-02-18 No fix listed CWE-89

TI-2010-01650 CVE-2010-1721 · GHSA-xvhq-v5ww-mmhx

SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty)…

LOW 35

SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty) component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2010-05-04 No fix listed CWE-89

Vulnerabilities

Filters

Joomla iProperty Real Estate 4.1.1 Reflected XSS via filter_keyword

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

SQL injection vulnerability in the Intellectual Property (aka IProperty or com_iproperty)…