CVE-2019-9184

PoC —

CVSS 3.0

9.8 critical

EPSS

9%p95

Published

Feb 26, 2019 (Feb 26, 2019)

Modified

Jun 17, 2026

Description

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.

Vendors: j2store
Products: j2store
Ecosystems: Joomla
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.0%)

In the news0 stories

No ingested article mentions this CVE yet.