CVE-2025-22207

creationtimestamp| type| source ---|---|--- 2025-02-18 16:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihntyr2gc2y 2025-02-18 19:19:18+00:00| seen| https://t.me/cvedetector/18336...

CVE-2025-22207

CVE-2025-22207 is a Joomla! SQL injection in the backend task list of the com_scheduler component caused by improperly built ORDER clauses. Affected versions include Joomla! 4.x earlier than 4.4.11 and 5.x earlier than 5.2.4, per connected scanner/NVD data. The vulnerability allows an attacker to...

CVE-2025-22207 [20250201] - Core - SQL injection vulnerability in Scheduled Tasks component

Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...

Joomla 4.1.x < 4.4.11 / 5.0.x < 5.2.4 Joomla 5.2.4 Security & Bugfix Release (5920-joomla-5-2-4-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.1.x prior to 4.4.11 or 5.0.x prior to 5.2.4. It is, therefore, affected by a vulnerability. - Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of...