BIT-JOOMLA-2026-48900 Joomla! Core - [20260516] - Incorrect Access Control in com_scheduler

An improper access check allowed low privileged users to edit the task types of existing scheduler tasks...

CVE-2026-48900 Joomla! Core - [20260516] - Incorrect Access Control in com_scheduler

An improper access check allowed low privileged users to edit the task types of existing scheduler tasks...

EUVD-2025-4794

Malicious code in bioql PyPI...

CVE-2025-22207

Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...

CVE-2025-22207 [20250201] - Core - SQL injection vulnerability in Scheduled Tasks component

Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...

CVE-2025-22207

CVE-2025-22207 is a Joomla! SQL injection in the backend task list of the com_scheduler component caused by improperly built ORDER clauses. Affected versions include Joomla! 4.x earlier than 4.4.11 and 5.x earlier than 5.2.4, per connected scanner/NVD data. The vulnerability allows an attacker to...

CVE-2025-22207: Improper Neutralization of Special Elements used in an SQL Command

Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...