Threats tagged 'ghsa-h9xw-5459-2pqw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.5%	CVE-2026-76570joomcode.com JCTables extension for Joomla · SQL Injection Critical10.0EPSS 0.5%2026-09-30CVE Database V5CVE-2026-76570 Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries. EPSS 0.5%Vulnerability CWE-89 #ghsa-h9xw-5459-2pqw	CVE Database V5	2026-09-30

Page 1 of 1