Threats tagged 'ghsa-g3qw-rp5c-h7mm'

The Joomla extension DJ-Classifieds versions prior to 3.11.3 contains an unauthenticated SQL injection vulnerability in the frontend search functionality. This flaw allows attackers to execute arbitrary SQL commands without authentication, potentially leading to severe impacts on data confidentiality, integrity, and availability. The vulnerability is rated critical with a CVSS score of 9.3. No patch or remediation details are provided in the available data.