CVE-2026-35222 Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags

Improperly validated order clauses lead to a SQL injection vulnerability in comtags...

HTML Injection

phpmyfaq is vulnerable to HTML Injection. The vulnerability exists due to improper input sanitization in the tags component, which allows an attacker to inject and execute malicious HTML content, possibly resulting in code execution...

CVE-2021-25514

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information...

CVE-2021-23125

An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...