Threats tagged 'ghsa-h8qj-2h58-jw98'

An unauthenticated blind SQL injection vulnerability exists in the J2Store extension for Joomla, affecting versions 1.0.0 through 3.3.22, 4.0.0 through 4.0.22, and 4.1.0 through 4.1.7. This flaw allows attackers to extract arbitrary database content from the storefront product list or product-tags filter via boolean- or time-based inference without authentication.