CVE-2025-40636

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-40636

The CVE-2025-40636 entry describes a SQL injection in the Joomla module mod_vvisit_counter (version v2.0.4j3 ). The vulnerability stems from improper handling of the cookie parameter cip_vvisitcounter , allowing an attacker to retrieve database content at endpoints where the plugin counts visits....