CVE-2018-14592: Improper Neutralization of Special Elements used in an SQL Command

The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php...