Threats tagged 'ghsa-mj2w-425j-5pwf'

1 threat

Threats tagged 'ghsa-mj2w-425j-5pwf'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.5%	CVE-2026-78082SP Property extension for Joomla · Improper Neutralization of Special Elements used in an SQL Command Critical9.3EPSS 0.5%2026-09-10CVE Database V5CVE-2026-78082 An unauthenticated SQL injection vulnerability exists in the SP Property extension for Joomla versions 1.0.0 through 4.1.3. The vulnerability arises from unsafe concatenation of user-supplied parameters into SQL queries in the property search and map filtering features, allowing attackers to perform blind SQL injection attacks to extract sensitive database information. EPSS 0.5%Vulnerability joomshaper.com #cwe-89 #ghsa-mj2w-425j-5pwf	CVE Database V5	2026-09-10

Showing 1–1 of 1 result