CVE-2018-17377

CVE-2018-17377 affects the Joomla! extension component “Questions” version 1.4.3, where an SQL injection is possible via the term, userid, users, or groups parameters in the Questions 1.4.3 component. The root cause is improper handling of user-supplied input in queries, enabling an attacker to a...