Lucene search

K
joomlaOpen Source Matters, Inc.JOOMLA-807
HistoryMar 09, 2020 - 12:00 a.m.

[20200306] - Core - SQL injection in Featured Articles menu parameters

2020-03-0900:00:00
Open Source Matters, Inc.
developer.joomla.org
43

0.002 Low

EPSS

Percentile

57.2%

The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in the “Featured Articles” frontend menutype.

CPENameOperatorVersion
joomla! cmslt3.9.16

0.002 Low

EPSS

Percentile

57.2%