Vulnerabilities
2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-49048 | The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter int The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or parameterisation. NVD description · AI analysis pending | 8.7 | <1% |
| — | ||
| CVE-2023-40630 | Unauthenticated LFI/SSRF in JCDashboards component for Joomla. Unauthenticated LFI/SSRF in JCDashboards component for Joomla. NVD description · AI analysis pending | 9.8 | <1% |
| — |