CVE-2026-102800

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles quote was applied on insert, which protects the SQL statement but does nothing for HTML output. There was no CSRF token, no rate limit, and the vote de-duplication keyed on the same attacker-controlled field...

CVE-2026-102800

The DJ-HelpfulArticles Joomla extension by dj-extensions.com (versions prior to 1.3.0 ) is vulnerable to Unauthenticated Stored XSS . The root cause is that the "was this article helpful" voting widget accepts a client-supplied ip field via AJAX handlers (getDeny, getConfirm, getDenyReason in mod...

CVE-2026-102800 Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles quote was applied on insert, which protects the SQL statement but does nothing for HTML output. There was no CSRF token, no rate limit, and the vote de-duplication keyed on the same attacker-controlled field...

EUVD-2026-110809

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles quote was applied on insert, which protects the SQL statement but does nothing for HTML output. There was no CSRF token, no rate limit, and the vote de-duplication keyed on the same attacker-controlled field...

PT-2026-126357

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles quote was applied on insert, which protects the SQL statement but does nothing for HTML output. There was no CSRF token, no rate limit, and the vote de-duplication keyed on the same attacker-controlled field...

EUVD-2024-24422

Malicious code in bioql PyPI...

CVE-2024-27183

XSS vulnerability in DJ-HelpfulArticles component for Joomla...

CVE-2024-27183

XSS vulnerability in DJ-HelpfulArticles component for Joomla...

CVE-2024-27183 Extension - dj-extensions.com - XSS vulnerability in DJ-HelpfulArticles component for Joomla 1.0.0-1.1.0

XSS vulnerability in DJ-HelpfulArticles component for Joomla...

CVE-2024-27183

CVE-2024-27183 concerns a cross-site scripting (XSS) vulnerability in the Joomla extension DJ-HelpfulArticles . Multiple connected sources identify the affected product as the Joomla component and list vulnerable versions as 1.0.0–1.1.0 . The description documents an XSS flaw but does not provide...

CVE-2024-27183: Improper Neutralization of Input During Web Page Generation

XSS vulnerability in DJ-HelpfulArticles component for Joomla...

PT-2024-21718

Name of the Vulnerable Software and Affected Versions DJ-HelpfulArticles component for Joomla affected versions not specified Description The issue is related to a XSS vulnerability in the DJ-HelpfulArticles component for Joomla. No information is provided about the estimated number of potentiall...

Joomla dj-helpfularticles extension 1.0.0-1.1.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by ? in WordPress Extension dj-helpfularticles versions 1.0.0-1.1.0...