CVE-2023-38044 Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2

2023-08-0716:51:06

CWE-89

Joomla

www.cve.org

cve-2023-38044

sql injection

hikashop

AI Score

Confidence

High

EPSS

0.001

Percentile

49.1%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability allows SQL Injection.

CNA Affected

[
  {
    "collectionURL": "https://extensions.joomla.org/extension/hikashop/",
    "defaultStatus": "unaffected",
    "packageName": "com_hikashop",
    "product": "HikaShop component for Joomla",
    "vendor": "hikashop.com",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0-4.7.2"
      }
    ]
  }
]