Threats tagged 'ghsa-hqjq-crc6-5fp3'

An unauthenticated SQL injection vulnerability exists in the Joomla extension Gridbox versions prior to 2.20.4.2. The vulnerability occurs on store product list pages where the 'sort-by' URL parameter is improperly handled, allowing injection into the ORDER BY clause of a SQL query without proper validation.