8.5Alta
CVE-2025-54474Extension - dj-extensions.com - SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla
Descripción
A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.
Debilidad (CWE):
CWE-89
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| dj-extensions.com | DJ-Classifieds component for Joomla | 3.9.2-3.10.1 |
Referencias y parches
- https://dj-extensions.com/ product