1 matches found
CVE-2026-88855: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...
8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References2
20